PT-2025-25923 · Linux+1 · Linux Kernel+1

Published 2022-08-24 · Updated 2026-05-26 · CVE-2022-49997

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the lantiq xrx200 module. When memory allocation fails, an invalid buffer address is stored. Upon reusing this descriptor, the system crashes in the build skb() function due to an attempt to access memory at this invalid address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Allocation of Resources Without Limits

Weakness Enumeration

CWE-401

CWE-770

Related Identifiers

BDU:2026-03240

CVE-2022-49997

Affected Products

Debian

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49997.json · Exploit
• https://git.kernel.org/stable/c/3ef2786e32d93e562cd40601248a14ae090de873 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49997 · Vendor Advisory
• https://git.kernel.org/stable/c/c9c3b1775f80fa21f5bff874027d2ccb10f5d90c · Patch
• https://osv.dev/vulnerability/CVE-2022-49997 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49997 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49997 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49997 · Security Note
• https://ubuntu.com/security/CVE-2022-49997 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03240 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49997 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49997 · Vendor Advisory
• https://twitter.com/CVEnew/status/1935723323331432599 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note