PT-2025-18647 · Linux+1 · Linux Kernel+1

Published 2025-05-01 · Updated 2025-05-02 · CVE-2022-49930

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer problem in the free mr init() function has been resolved. The issue occurs in a concurrent scenario, resulting in a NULL pointer dereference at virtual address 0000000000000000. The problem is caused by not initializing mutex init() before using the lock. The call trace includes functions such as mutex lock.constprop.0(), mutex lock slowpath(), mutex lock(), free mr send cmd to hw(), and others.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49930

Affected Products

Astra Linux

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49930.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49930 · Vendor Advisory
• https://git.kernel.org/stable/c/12bcaf87d8b66d8cd812479c8a6349dcb245375c · Patch
• https://ubuntu.com/security/CVE-2022-49930 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49930 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49930 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49930 · Vendor Advisory
• https://git.kernel.org/stable/c/0e23e85d86b78e734dd6654f1b69fbaeb5534c81 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49930 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49930 · Vendor Advisory
• https://git.kernel.org/linus/12bcaf87d8b66d8cd812479c8a6349dcb245375c · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1917950785272557959 · Twitter Post
• https://t.me/cvedetector/24241 · Telegram Post