PT-2025-18586 · Linux+2 · Linux Kernel+2

Published 2025-05-01 · Updated 2025-07-10 · CVE-2022-49869

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.18.0 through 4.18.0-348.el8.x86 64

Description A possible crash in the bnxt en driver has been resolved. The issue occurred during the error recovery sequence when the rtnl lock was not held for the entire duration, and some data structures may have been freed during the sequence. To ensure the device is fully operational before reconfiguring coalescing settings, the BNXT STATE OPEN flag is checked instead of netif running(). This fix addresses a possible crash that may have occurred due to a kernel NULL pointer dereference.

Recommendations For Linux kernel version 4.18.0-348.el8.x86 64, update to a version that includes the fix for the bnxt en driver issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49869

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 446

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49869.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49869 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49869 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49869 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49869 · Vendor Advisory
• https://git.kernel.org/stable/c/38147073c96dce8c7e142ce0e5f305a420a729ba · Patch
• https://ubuntu.com/security/CVE-2022-49869 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ac257c43fa615d22180916074feed803b8bb8cb0 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49869 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01918-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a5a05fbef4a0dfe45fe03b2f1d02ba23aebf5384 · Patch
• https://git.kernel.org/stable/c/7781e32984cde65549bedc3201537e253297c98d · Patch