PT-2025-25902 · Linux+1 · Linux Kernel+1

Published 2022-08-10 · Updated 2025-11-13 · CVE-2022-49976

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically related to the handling of the Chuwi Hi8 touchscreen with Windows BIOS. The issue arises when the x86-android-tablets handling, necessary only for the Android BIOS, is applied to the Windows BIOS version, causing problems with the touchscreen and leading to an error. The x86 acpi irq helper get() function calls acpi unregister gsi(), breaking the touchscreen functionality and resulting in a warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2026-03131

CVE-2022-49976

Affected Products

Astra Linux

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49976.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-49976 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49976 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49976 · Security Note
• https://git.kernel.org/stable/c/c77b724cddfb8ac1291a60e3e68937e62cbfc5e0 · Patch
• https://git.kernel.org/stable/c/2986c51540ed50ac654ffb5a772e546c02628c91 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49976 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49976 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49976 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03131 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49976 · Security Note
• https://t.me/cveNotify/142734 · Telegram Post
• https://lore.kernel.org/linux-cve-announce/2025061819-CVE-2022-49976-0442@gregkh · Note
• https://twitter.com/CVEnew/status/1935727356011815141 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note