PT-2025-18557 · Linux+2 · Linux Kernel+2

Published 2022-11-02 · Updated 2025-06-17 · CVE-2022-49840

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A problem of alignment in the bpf prog test run skb() function has been resolved. The issue occurred when the size of the user bpf program was an odd number, causing unaligned access to the struct skb shared info. This led to a use-after-free read error. The error was detected by syzkaller due to an aarch64 alignment fault when KFENCE was enabled.

Recommendations To resolve the issue, adjust the @size so that (@size + @hearoom) is a multiple of SMP CACHE BYTES, ensuring the struct skb shared info is aligned to a cache line. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-10252

CVE-2022-49840

SUSE-SU-2025:01983-1

SUSE-SU-2025_01983-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 379

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49840.json · Exploit
• https://git.kernel.org/stable/c/047824a730699c6c66df43306b80f700c9dfc2fd · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49840 · Vendor Advisory
• https://git.kernel.org/stable/c/7a704dbfd3735304e261f2787c52fbc7c3884736 · Patch
• https://git.kernel.org/stable/c/d3fd203f36d46aa29600a72d57a1b61af80e4a25 · Patch
• https://git.kernel.org/stable/c/1b597f2d6a55e9f549989913860ad5170da04964 · Patch
• https://git.kernel.org/stable/c/eaa8edd86514afac9deb9bf9a5053e74f37edf40 · Patch
• https://git.kernel.org/stable/c/e60f37a1d379c821c17b08f366412dce9ef3d99f · Patch
• https://git.kernel.org/stable/c/730fb1ef974a13915bc7651364d8b3318891cd70 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49840 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10252 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49840 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49840 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49840 · Security Note