PT-2025-18638 · Linux+2 · Linux Kernel+2

Published 2025-05-01 · Updated 2025-07-16 · CVE-2022-49921

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free issue has been resolved in the Linux kernel's networking scheduler. The problem occurs because the skb cannot be used again after it is passed to qdisc enqueue(). This fix is similar to a previous commit that stored the skb length before calling the child enqueue function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-05848

CVE-2022-49921

OESA-2025-1820

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02334-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 715

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49921.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50084 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49938 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49989 · Security Note
• https://git.kernel.org/stable/c/5960b9081baca85cc7dcb14aec1de85999ea9d36 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49948 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49921 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49942 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49987 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38063 · Security Note
• https://git.kernel.org/stable/c/8bdc2acd420c6f3dd1f1c78750ec989f02a1e2b9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50134 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49921 · Vendor Advisory