PT-2025-18571 · Linux+1 · Linux Kernel+1

Published 2025-05-01 · Updated 2025-05-02 · CVE-2022-49854

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to an error handling path in the mctp init() function. If the mctp neigh init() function returns an error, the resources of the routes should be released in the error handling path to prevent resource leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49854

Affected Products

Astra Linux

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49854.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49854 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49854 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49854 · Security Note
• https://git.kernel.org/stable/c/d4072058af4fd8fb4658e7452289042a406a9398 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49854 · Vendor Advisory
• https://git.kernel.org/stable/c/216c83222d2eb24b0e63df56e8740b02c33286e8 · Patch
• https://git.kernel.org/stable/c/49d8a6e24a3496d86e8d8ae748375df984fb6d6f · Patch
• https://ubuntu.com/security/CVE-2022-49854 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49854 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49854 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/d4072058af4fd8fb4658e7452289042a406a9398 · Note
• https://twitter.com/CVEnew/status/1917950868017828163 · Twitter Post