PT-2025-25898 · Linux+2 · Linux Kernel+2

Published 2022-08-12 · Updated 2025-07-15 · CVE-2022-49972

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the XDP SHARED UMEM mode in the Linux kernel, where packets are corrupted for the second and any further sockets bound to the same umem. This does not affect the first socket bound to the umem. The problem arises from the incomplete initialization of DMA addresses for the pre-populated xsk buffer pool entries, which was only performed for the first socket bound to the umem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2026-04881

CVE-2022-49972

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 578

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49972.json · Exploit
• https://git.kernel.org/stable/c/2c75891d56ab6fe5ba0d415bfad91d514a4027cd · Patch
• https://cve.org/CVERecord?id=CVE-2022-49972 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49972 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49972 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49972 · Security Note
• https://git.kernel.org/stable/c/58ca14ed98c87cfe0d1408cc65a9745d9e9b7a56 · Patch
• https://ubuntu.com/security/CVE-2022-49972 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49972 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49972 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04881 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2022-50111 · Note
• https://bugzilla.suse.com/1244968 · Note