PT-2025-13291 · Linux+3 · Linux Kernel+3

Published 2025-03-27 · Updated 2025-05-29 · CVE-2022-49749

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resolved issue in the Linux kernel involves the i2c designware component, where functions i2c dw scl lcnt() and i2c dw scl hcnt() may experience an overflow depending on the values of given parameters, including ic clk. This overflow can occur when ic clk is large, such as over one million, causing a 32-bit overflow when multiplied by 4700. The fix involves casting to u64 to avoid multiplication overflow and using the corresponding define for division.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2025-06288

CVE-2022-49749

SUSE-SU-2025:01600-1

SUSE-SU-2025_01600-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 233

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49749.json · Exploit
• https://git.kernel.org/stable/c/2f29d780bd691d20e89e5b35d5e6568607115e94 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49749 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49749 · Security Note
• https://git.kernel.org/stable/c/ed173f77fd28a3e4fffc13b3f28687b9eba61157 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49749 · Vendor Advisory
• https://git.kernel.org/stable/c/c8c37bc514514999e62a17e95160ed9ebf75ca8d · Patch
• https://git.kernel.org/stable/c/9f36aae9e80e79b7a6d62227eaa96935166be9fe · Patch
• https://osv.dev/vulnerability/CVE-2022-49749 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49749 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06288 · Security Note
• https://ubuntu.com/security/CVE-2022-49749 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01600-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49749 · Security Note
• https://access.redhat.com/security/cve/cve-2022-49749 · Note