PT-2025-25865 · Linux+1 · Linux Kernel+1

Published 2022-08-18 · Updated 2025-06-19 · CVE-2022-49939

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc8

Description A use-after-free bug has been identified in the Linux kernel, specifically in the binder component. This issue arises due to a race condition where a transaction of type BINDER TYPE WEAK HANDLE can fail to increment the reference for a node, leading to a dangling pointer. The bug occurs when the target process is dying in parallel with the call to binder deferred release(), resulting in the cleanup of the new failed reference being left unhandled. This can cause a use-after-free error when attempting to take a spin lock on the released process.

Recommendations For Linux kernel versions prior to 5.19.0-rc8, update to a version that includes the fix for the use-after-free bug in the binder component. As a temporary workaround, consider disabling the binder deferred func function until a patch is available. Restrict access to the binder component to minimize the risk of exploitation. Avoid using the BINDER TYPE WEAK HANDLE transaction type in the affected binder component until the issue is resolved.

Exploit

Fix

Use After Free

Race Condition

Weakness Enumeration

CWE-416

CWE-362

Related Identifiers

BDU:2026-01259

CVE-2022-49939

Affected Products

Astra Linux

Linux Kernel

References · 26

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49939.json · Exploit
• https://git.kernel.org/stable/c/229f47603dd306bc0eb1a831439adb8e48bb0eae · Patch
• https://bdu.fstec.ru/vul/2026-01259 · Security Note
• https://git.kernel.org/stable/c/9629f2dfdb1dad294b468038ff8e161e94d0b609 · Patch
• https://git.kernel.org/stable/c/30d0901b307f27d36b2655fb3048cf31ee0e89c0 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49939 · Vendor Advisory
• https://git.kernel.org/stable/c/06e5b43ca4dab06a92bf4c2f33766e6fb11b880a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49939 · Vendor Advisory
• https://git.kernel.org/stable/c/c2a4b5dc8fa71af73bab704d0cac42ac39767ed6 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49939 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49939 · Vendor Advisory
• https://git.kernel.org/stable/c/603a47f2ae56bf68288784d3c0a8c5b8e0a827ed · Patch
• https://osv.dev/vulnerability/CVE-2022-49939 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49939 · Security Note
• https://ubuntu.com/security/CVE-2022-49939 · Vendor Advisory