PT-2025-13290 · Linux+4 · Linux Kernel+4

Published 2023-11-07 · Updated 2025-05-29 · CVE-2022-49748

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential integer overflow issue has been identified in the Linux kernel, specifically in the perf/x86/amd component. The issue arises when a 32-bit integer constant 1 is left-shifted using 32-bit arithmetic and then passed as a 64-bit function argument. This can lead to an overflow when the shift amount is 32 or more. The problem is resolved by using the BIT ULL macro for shifting instead.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2025-06287

CVE-2022-49748

OPENSUSE-SU-2025_1195-1

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

Suse

References · 1335

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49748.json · Exploit
• https://bdu.fstec.ru/vul/2025-06287 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f84c9b72fb200633774704d8020f769c88a4b249 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49748 · Security Note
• https://git.kernel.org/stable/c/14cc13e433e1067557435b1adbf05608d7d47a93 · Patch
• https://git.kernel.org/stable/c/08245672cdc6505550d1a5020603b0a8d4a6dcc7 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49748 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49748 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49748 · Vendor Advisory
• https://git.kernel.org/stable/c/fbf7b0e4cef3b5470b610f14fb9faa5ee7f63954 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49748 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1195-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a4d01fb87ece45d4164fd725890211ccf9a307a9 · Patch