PT-2025-18575 · Linux+2 · Linux Kernel+2

Published 2025-05-01 · Updated 2026-05-26 · CVE-2022-49858

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the octeontx2-pf driver. The issue was related to the checking of available SQE count, which could result in the driver submitting an SQE before the CQE for the previously transmitted SQE at the same index is processed, leading to a leak of SKB pointers. This was fixed by checking a consumer index that is updated once the CQE is processed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-05842

CVE-2022-49858

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Debian

Linux Kernel

Suse

References · 447

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49858.json · Exploit
• https://bdu.fstec.ru/vul/2026-05842 · Security Note
• https://git.kernel.org/stable/c/f0dfc4c88ef39be0ba736aa0ce6119263fc19aeb · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49858 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49858 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01918-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49858 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49858 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49858 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49858 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49858 · Security Note
• https://git.kernel.org/stable/c/015e3c0a3b16193aab23beefe4719484b9984c2d · Patch