PT-2025-18576 · Linux+1 · Linux Kernel+1

Published 2022-11-08 · Updated 2025-05-02 · CVE-2022-49859

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel related to the lapbether module. The issue involves an invalid opcode in the lapbeth open() function. If lapb register() fails when the lapb device is started for the first time, NAPI is not disabled, resulting in the invalid opcode issue being reported when the lapb device is started for the second time. The stack trace indicates a kernel bug at net/core/dev.c:6442 and an invalid opcode at napi enable+0x16a/0x1f0. The call trace includes functions such as lapbeth open+0x18/0x90, dev open+0x258/0x490, and devinet ioctl+0x1276/0x1bf0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2026-03977

CVE-2022-49859

Affected Products

Astra Linux

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49859.json · Exploit
• https://git.kernel.org/stable/c/ed4940050a7ce7fc2ccd51db580ef1ade64290b1 · Patch
• https://bdu.fstec.ru/vul/2026-03977 · Security Note
• https://git.kernel.org/stable/c/3faf7e14ec0c3462c2d747fa6793b8645d1391df · Patch
• https://osv.dev/vulnerability/CVE-2022-49859 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49859 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49859 · Vendor Advisory
• https://git.kernel.org/stable/c/4689bd3a1b23a1bd917899e63b81bca2ccdfab45 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49859 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49859 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49859 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49859 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.79 · Note
• https://twitter.com/CVEnew/status/1917950862867202538 · Twitter Post
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.9 · Note