PT-2025-7977 · Linux+3 · Linux Kernel+3

Axel Rasmussen · Published 2022-01-01 · Updated 2025-09-29 · CVE-2022-49049

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description A issue in the Linux kernel has been resolved, related to the memfd secret functionality. When attempting to grow an existing memfd secret using ftruncate, a panic occurs due to the inability to zero part of the memory. This happens because memfd secret does not map its pages via the direct map, making the address returned by page address() useless. The patch implements a custom setattr for memfd secret that detects resizes and rejects them with EINVAL.

Recommendations For Linux kernel versions prior to the fixed version, consider applying the patch that implements a custom setattr for memfd secret to avoid the panic when growing an existing memfd secret. As a temporary workaround, avoid using ftruncate to resize memfd secret objects until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2025_16880

BDU:2026-03821

CVE-2022-49049

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Astra Linux

Debian

Linux Kernel

Red Hat

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49049.json · Exploit
• https://bdu.fstec.ru/vul/2026-03821 · Security Note
• https://git.kernel.org/stable/c/9d3b877daf805fed29be8f61aa3d0ea37df82c7b · Patch
• https://ubuntu.com/security/CVE-2022-49049 · Vendor Advisory
• https://git.kernel.org/stable/c/b6d17c67885a5624e96eb30c4178c65eea8374bf · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49049 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49049 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49049 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49049 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49049 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49049 · Security Note
• https://git.kernel.org/stable/c/f9b141f93659e09a52e28791ccbaf69c273b8e92 · Patch
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.4 · Note
• https://lore.kernel.org/linux-cve-announce/2025022651-CVE-2022-49049-d847@gregkh · Note
• https://lore.kernel.org/linux-cve-announce/2025022651-CVE-2022-49049-d847@gregkh/T · Note