PT-2025-18480 · Linux+2 · Linux Kernel+2

Published 2022-09-11 · Updated 2025-06-30 · CVE-2022-49763

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the ntfs attr find() function. This issue can be triggered when the kernel loads the first MFT record and fails to check if the attrs offset field is a valid value. If the attrs offset field is larger than the bytes allocated field, it may cause an out-of-bounds read bug, reported as a use-after-free bug, when the kernel tries to access the corresponding MFT record's attribute. The issue is resolved by adding a sanity check between the attrs offset field and the bytes allocated field after loading the first MFT record.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Use After Free

Weakness Enumeration

CWE-125

CWE-416

Related Identifiers

BDU:2026-01507

CVE-2022-49763

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 435

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49763.json · Exploit
• https://git.kernel.org/stable/c/5330c423b86263ac7883fef0260b9e2229cb531e · Patch
• https://git.kernel.org/stable/c/b825bfbbaafbe8da2037e3a778ad660c59f9e054 · Patch
• https://osv.dev/vulnerability/CVE-2022-49763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49763 · Security Note
• https://git.kernel.org/stable/c/4863f815463034f588a035cfd99cdca97a4f1069 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49763 · Security Note
• https://git.kernel.org/stable/c/fb2004bafd1932e08d21ca604ee5844f2b7f212d · Patch
• https://git.kernel.org/stable/c/266bd5306286316758e6246ea0345133427b0f62 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49763 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49763 · Vendor Advisory
• https://git.kernel.org/stable/c/d0006d739738a658a9c29b438444259d9f71dfa0 · Patch
• https://git.kernel.org/stable/c/79f3ac7dcd12c05b7539239a4c6fa229a50d786c · Patch