PT-2025-25877 · Linux+4 · Linux Kernel+4

Published 2022-09-01 · Updated 2025-07-15 · CVE-2022-49951

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel's firmware loader. The problem occurs during the unregister process, where the device unregister() call could result in the dev release function freeing the fw upload priv structure before it is dereferenced for the module put() call. This issue was discovered by the kernel test robot using CONFIG KASAN while running firmware selftests. The vulnerable code is located within firmware upload unregister(), specifically in the calls to device unregister(&fw sysfs->dev) and module put(fw upload priv->module).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-02035

CESA-2023_2951

CVE-2022-49951

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 579

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49951.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49951 · Vendor Advisory
• https://git.kernel.org/stable/c/d380d40930a674c520a5b55f3be1eb17dc634ebc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49951 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02035 · Security Note
• https://git.kernel.org/stable/c/8b40c38e37492b5bdf8e95b46b5cca9517a9957a · Patch
• https://cve.org/CVERecord?id=CVE-2022-49951 · Security Note
• https://ubuntu.com/security/CVE-2022-49951 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49951 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49951 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49951 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://bugzilla.suse.com/1243627 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.8 · Note