PT-2025-18629 · Linux+1 · Linux Kernel+1

Published 2022-11-02 · Updated 2025-11-12 · CVE-2022-49912

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the btrfs qgroup self tests. The issue occurred in the test no shared qgroup() and test multiple refs() tests, where if certain operations failed, such as adding a tree ref, removing an extent item, or removing an extent ref, the function would return without freeing the allocated old roots ulist. This was fixed by calling ulist free() before returning from the test function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Memory Leak

Weakness Enumeration

CWE-770

CWE-401

Related Identifiers

BDU:2026-03732

CVE-2022-49912

Affected Products

Astra Linux

Linux Kernel

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49912.json · Exploit
• https://git.kernel.org/stable/c/3f58283d83a588ff5da62fc150de19e798ed2ec2 · Patch
• https://git.kernel.org/stable/c/203204798831c35d855ecc6417d98267d2d2184b · Patch
• https://git.kernel.org/stable/c/0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84 · Patch
• https://bdu.fstec.ru/vul/2026-03732 · Security Note
• https://ubuntu.com/security/CVE-2022-49912 · Vendor Advisory
• https://git.kernel.org/stable/c/f46ea5fa3320dca4fe0c0926b49a5f14cb85de62 · Patch
• https://git.kernel.org/stable/c/da7003434bcab0ae9aba3f2c003e734cae093326 · Patch
• https://git.kernel.org/stable/c/d37de92b38932d40e4a251e876cc388f9aee5f42 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49912 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49912 · Security Note
• https://git.kernel.org/stable/c/d81370396025cf63a7a1b5f8bb25a3479203b2ca · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49912 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49912 · Vendor Advisory
• https://git.kernel.org/stable/c/5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9 · Patch