PT-2025-18601 · Linux+1 · Linux Kernel+1

Published 2022-10-27 · Updated 2025-05-02 · CVE-2022-49884

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the KVM (Kernel-based Virtual Machine) component. The issue involves the initialization of locks in the gfn to pfn cache, which can lead to race conditions. For example, a race between the ioctl(KVM XEN HVM EVTCHN SEND) and kvm gfn to pfn cache init() functions can cause a corrupted shinfo gpc lock. To address this, the initialization of the gfn to pfn cache locks has been moved to a dedicated helper function, which is called during VM or vCPU creation. Additionally, the "cache init" and "cache destroy" functions have been renamed to "activate" and "deactivate" to avoid implying that the cache is destroyed or freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Improper Initialization

Weakness Enumeration

CWE-362

CWE-665

Related Identifiers

BDU:2026-03963

CVE-2022-49884

Affected Products

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49884.json · Exploit
• https://bdu.fstec.ru/vul/2026-03963 · Security Note
• https://git.kernel.org/stable/c/61242001d6c9c253df7645dab090842d8da08764 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49884 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49884 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49884 · Vendor Advisory
• https://git.kernel.org/stable/c/52491a38b2c2411f3f0229dc6ad610349c704a41 · Patch
• https://ubuntu.com/security/CVE-2022-49884 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49884 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49884 · Security Note
• https://git.kernel.org/linus/52491a38b2c2411f3f0229dc6ad610349c704a41 · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.8 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1917950836023636431 · Twitter Post