PT-2025-18635 · Linux+2 · Linux Kernel+2

Published 2022-10-31 · Updated 2025-07-11 · CVE-2022-49918

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel. The issue occurs during the initialization of ip vs conn net init(), where if the file ip vs conn or ip vs conn sync fails to be created, the initialization is successful by default. As a result, the ip vs conn or ip vs conn sync file is not found during removal, leading to a WARNING in ip vs cleanup batch(). The stack information shows a call trace involving remove proc entry, ip vs cleanup batch, and other functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Improper Resource Release

Weakness Enumeration

CWE-755

CWE-404

Related Identifiers

BDU:2026-05780

CVE-2022-49918

OESA-2025-1820

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 472

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49918.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-38063 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50084 · Security Note
• https://git.kernel.org/stable/c/931f56d59c854263b32075bfac56fdb3b1598d1b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49918 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49907 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37911 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50087 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50085 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49964 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49989 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49921 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49918 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49987 · Security Note