PT-2025-18564 · Linux+1 · Linux Kernel+1

Published 2022-11-02 · Updated 2025-05-02 · CVE-2022-49847

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2

Description A segmentation fault issue has been resolved in the Linux kernel, specifically in the am65-cpsw driver. The problem occurred when the module was unloaded, causing a segmentation fault when the first slave link was active. The issue was addressed by moving the am65 cpsw nuss phylink cleanup() call to after am65 cpsw nuss cleanup ndev() to ensure that phylink remains valid.

Technical details about the issue include:

• The error occurred at virtual address 00040008000005f4
• The ESR value was 0x0000000096000004
• The EC value was 0x25, indicating a DABT (current EL) with IL = 32 bits
• The FSC value was 0x04, indicating a level 0 translation fault
• The phy stop() and phylink stop() functions were involved in the call trace
• The am65 cpsw nuss ndo slave stop() function was also part of the call trace

Recommendations To resolve the issue, update the Linux kernel to a version newer than 6.1.0-rc2. As a temporary workaround, consider disabling the am65 cpsw nuss module until a patch is available. Restrict access to the vulnerable am65-cpsw driver to minimize the risk of exploitation. Avoid using the phylink interface in the affected API endpoint until the issue is resolved.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-05948

CVE-2022-49847

Affected Products

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49847.json · Exploit
• https://git.kernel.org/stable/c/1a0c016a4831ea29be09bbc8162d4a2a0690b4b8 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49847 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49847 · Security Note
• https://git.kernel.org/stable/c/442fd1bfe599bc54d118775e9e1a4fe913e4b369 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49847 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49847 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49847 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05948 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49847 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49847 · Vendor Advisory
• https://git.kernel.org/linus/1a0c016a4831ea29be09bbc8162d4a2a0690b4b8 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1917950875403968838 · Twitter Post
• https://access.redhat.com/security/cve/cve-2022-49847 · Note