PT-2025-18532 · Linux+2 · Linux Kernel+2

Published 2022-11-14 · Updated 2025-05-13 · CVE-2022-49815

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, specifically in the erofs component when operating in fscache mode. The problem arises because the xarray iteration only maintains a read lock, which can lead to encountering an XA RETRY ENTRY if another process is modifying the xarray simultaneously. This situation causes errors when attempting to access an invalid entry. The solution involves adding a missing xas retry() call, which will make the iteration return to the root node upon encountering an XA RETRY ENTRY.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2026-05945

CVE-2022-49815

RHSA-2025:6966

RHSA-2025_6966

Affected Products

Astra Linux

Linux Kernel

Red Hat

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49815.json · Exploit
• https://bdu.fstec.ru/vul/2026-05945 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49815 · Vendor Advisory
• https://git.kernel.org/stable/c/37020bbb71d911431e16c2c940b97cf86ae4f2f6 · Patch
• https://ubuntu.com/security/CVE-2022-49815 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49815 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49815 · Security Note
• https://git.kernel.org/stable/c/dbc98fe99e17ed18f2f272d5fe880d844b1c68c3 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49815 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49815 · Security Note
• https://twitter.com/CVEnew/status/1918014617327997394 · Twitter Post
• https://access.redhat.com/security/cve/cve-2022-49815 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/37020bbb71d911431e16c2c940b97cf86ae4f2f6 · Note