PT-2025-18569 · Linux+1 · Linux Kernel+1

Published 2025-05-01 · Updated 2026-01-23 · CVE-2022-49852

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A security issue has been identified in the Linux kernel, specifically related to the riscv process, where the s[12] array in thread struct may contain random kernel memory content. This content could potentially leak to userspace, posing a security risk. The issue is resolved by clearing the s[12] array in thread struct when forking. Additionally, for the kthread case, it is recommended to clear the s[12] array as well.

Recommendations To resolve the issue, clear the s[12] array in thread struct when forking. As for the kthread case, clear the s[12] array as well to ensure security.

Exploit

Fix

Related Identifiers

CVE-2022-49852

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49852.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49852 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49852 · Security Note
• https://git.kernel.org/stable/c/c4601d30f7d989b4f354df899ab85b5f7a750d30 · Patch
• https://ubuntu.com/security/CVE-2022-49852 · Vendor Advisory
• https://git.kernel.org/stable/c/c5c0b3167537793a7cf936fb240366eefd2fc7fb · Patch
• https://git.kernel.org/stable/c/6510c78490c490a6636e48b61eeaa6fb65981f4b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49852 · Vendor Advisory
• https://git.kernel.org/stable/c/358a68f98304b40b201ba5afe94c20355aa3dc68 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49852 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49852 · Vendor Advisory
• https://git.kernel.org/stable/c/cc36c7fa5d9384602529ba3eea8c5daee7be4dbc · Patch
• https://cve.org/CVERecord?id=CVE-2022-49852 · Security Note
• https://git.kernel.org/stable/c/e56d18a976dda653194218df6d40d8122c775712 · Patch
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note