PT-2025-18558 · Linux+2 · Linux Kernel+2

Published 2025-05-01 · Updated 2025-07-10 · CVE-2022-49841

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A warning occurs when the system hibernates with a non-console UART instance. The issue arises from the absence of the .thaw noirq hook, causing an unbalanced call that disables the clock and results in a warning. The call sequence involves the following functions: imx uart freeze(), imx uart suspend noirq(), imx uart thaw, and the missing imx uart resume noirq(). Adding the missing .thaw noirq hook corrects the call sequence and resolves the warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2026-05814

CVE-2022-49841

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:01982-1

SUSE-SU-2025:01995-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_01982-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 549

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49841.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49841 · Security Note
• https://git.kernel.org/stable/c/ae22294e213a402a70fa1731538367d1b758ffe7 · Patch
• https://git.kernel.org/stable/c/e401312ca6e180ee1bd65f6a766e99dd40aa95e7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49841 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49841 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01982-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49841 · Vendor Advisory
• https://git.kernel.org/stable/c/4561d8008a467cb05ac632a215391d6b787f40aa · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49841 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49841 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01995-1 · Vendor Advisory