PT-2025-25921 · Linux+4 · Linux Kernel+4

Published 2022-08-28 · Updated 2025-07-28 · CVE-2022-49995

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue occurs when a disk is removed, and the bdi unregister function is called to stop further writeback and wait for associated delayed work to complete. The wb inode writeback end() function may schedule bandwidth estimation dwork after this has completed, which can result in the timer attempting to access the just freed bdi writeback. This issue is resolved by checking if the bdi writeback is alive, similar to when scheduling writeback work, and switching wb->work lock to an irqsafe lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-02028

CESA-2023_7077

CVE-2022-49995

RHSA-2023:2458

RHSA-2023:7077

RHSA-2023_2458

RHSA-2023_7077

RHSA-2024:0575

RHSA-2025:12525

RHSA-2025:12526

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 592

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49995.json · Exploit
• https://git.kernel.org/stable/c/9a6c710f3bc10bc9cc23e1c080b53245b7f9d5b7 · Patch
• https://git.kernel.org/stable/c/f87904c075515f3e1d8f4a7115869d3b914674fd · Patch
• https://bdu.fstec.ru/vul/2026-02028 · Security Note
• https://git.kernel.org/stable/c/f96b9f7c1676923bce871e728bb49c0dfa5013cc · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49995 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49995 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49995 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49995 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49995 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49995 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49995 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02322-1 · Vendor Advisory