PT-2025-18615 · Linux+3 · Linux Kernel+3

Published 2025-05-01 · Updated 2026-03-14 · CVE-2022-49898

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the btrfs file system. The issue is related to the mishandling of the tree mod log for reallocated nodes, which can cause a kernel panic. The problem occurs when the kernel replays operations for a block that should not have been replayed, leading to incorrect handling of the tree mod log. This can result in a BUG ON condition being triggered in the tree mod log rewind function.

The vulnerability is triggered by a specific sequence of events, including the removal of items from a modified root, the promotion of a child node, and the re-allocation of a node to a new root. The tree mod log is not properly updated in this scenario, leading to the bug.

Recommendations To resolve this issue, it is recommended to update the Linux kernel to a version that includes the fix for this vulnerability. As a temporary workaround, consider disabling the tree mod log rewind function until a patch is available. However, this is not a recommended long-term solution, as it may have unintended consequences on the system's stability and performance. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49898

SUSE-SU-2025:01983-1

SUSE-SU-2025_01983-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 370

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49898.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49898 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49898 · Vendor Advisory
• https://git.kernel.org/stable/c/007058eb8292efc4c88f921752194b83269da085 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49898 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49898 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49898 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49898 · Vendor Advisory
• https://git.kernel.org/stable/c/968b71583130b6104c9f33ba60446d598e327a8b · Patch
• https://git.kernel.org/stable/c/52b2b65c9eb56fd829dda323786db828627ff7e6 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49898 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49898 · Vendor Advisory
• https://bugzilla.suse.com/1232504 · Note
• https://bugzilla.suse.com/1242792 · Note