PT-2025-18515 · Linux+1 · Linux Kernel+1

Published 2022-11-20 · Updated 2025-05-02 · CVE-2022-49798

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition in the Linux kernel's tracing system allows eprobes to be called before the event, potentially leading to a NULL kernel pointer bug. This occurs because the flag indicating that the event should call its triggers after reading the event is set for eprobes after they are enabled. As a result, an eprobe may be triggered at the start of an event when the record information is NULL, causing the eprobe to dereference the NULL record.

Recommendations For the Linux kernel, test for a NULL record to prevent this issue from occurring. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Race Condition

Weakness Enumeration

CWE-476

CWE-362

Related Identifiers

BDU:2026-03967

CVE-2022-49798

Affected Products

Astra Linux

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49798.json · Exploit
• https://bdu.fstec.ru/vul/2026-03967 · Security Note
• https://git.kernel.org/stable/c/73f5191467ffe3af82f27fe0ea6a8c2fac724d3f · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49798 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49798 · Vendor Advisory
• https://git.kernel.org/stable/c/7291dec4f2d17a2d3fd1f789fb41e58476539f21 · Patch
• https://git.kernel.org/stable/c/94eedf3dded5fb472ce97bfaf3ac1c6c29c35d26 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49798 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49798 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49798 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49798 · Security Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.10 · Note
• https://git.kernel.org/linus/94eedf3dded5fb472ce97bfaf3ac1c6c29c35d26 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.80 · Note