PT-2025-18481 · Linux+2 · Linux Kernel+2

Published 2022-09-16 · Updated 2026-04-20 · CVE-2022-49764

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, which prevented bpf program recursion for raw tracepoint probes. The issue was caused by a bpf program attached to the contention begin raw tracepoint, triggering the same tracepoint by using the bpf trace printk helper, taking the trace printk lock lock. This could lead to warnings and potential issues. The problem can be reproduced by attaching a bpf program as a raw tracepoint on the contention begin tracepoint and running perf bench, forcing the spin lock code to take the slow path and call the contention begin tracepoint.

Recommendations To resolve the issue, the execution of the bpf program should be skipped if it is already running, using the bpf prog 'active' field. Additionally, moving bpf prog inc misses counter to syscall.c can help, as trampoline.c is compiled in just for the CONFIG BPF JIT option. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

AZL-69716

BDU:2026-04498

CVE-2022-49764

SUSE-SU-2025:02334-1

SUSE-SU-2025_02334-1

Affected Products

Debian

Linux Kernel

Suse

References · 289

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49764.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49764 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49764 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49764 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49764 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49764 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49764 · Vendor Advisory
• https://git.kernel.org/stable/c/2e5399879024fedd6cdc41f73fbf9bbe7208f899 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49764 · Security Note
• https://bdu.fstec.ru/vul/2026-04498 · Security Note
• https://git.kernel.org/stable/c/05b24ff9b2cfabfcfd951daaa915a036ab53c9e1 · Patch
• https://osv.dev/vulnerability/AZL-69716 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49764 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49764 · Vendor Advisory