PT-2025-7975 · Linux+1 · Linux Kernel+1

Published 2022-04-07 · Updated 2025-03-07 · CVE-2022-49047

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the ep93xx clk register gate() function. This issue arises when memory is accessed after it has been freed, potentially leading to unexpected behavior or crashes. The problem is located in the arch/arm/mach-ep93xx/clock.c file, specifically at line 154. The clang-analyzer-unix.Malloc warning indicates the use of memory after it is freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-04344

CVE-2022-49047

Affected Products

Astra Linux

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49047.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49047 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49047 · Security Note
• https://ubuntu.com/security/CVE-2022-49047 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04344 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49047 · Vendor Advisory
• https://git.kernel.org/stable/c/0f12166872da46c6b57ba2f1314bbf310b3bf017 · Patch
• https://git.kernel.org/stable/c/3b68b08885217abd9c57ff9b3bb3eb173eee02a9 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49047 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49047 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49047 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.4 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/3b68b08885217abd9c57ff9b3bb3eb173eee02a9 · Note
• https://lore.kernel.org/linux-cve-announce/2025022651-CVE-2022-49047-fbc3@gregkh · Note