PT-2025-7980 · Linux+1 · Linux Kernel+1

Ivan Babrou · Published 2022-04-15 · Updated 2025-03-21 · CVE-2022-49052

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, which could allow user processes to be corrupted by seeing zeroed pages unexpectedly under certain conditions. This issue occurs when two processes are cloned under CLONE VM and one process is accessing a swap page while the other is freeing the swap slot. The problem arises because the swap slot free notify function does not increase the refcount of the swap slot, making it unreliable for synchronizing swap slot freeing. The patch removes this function and relies on the page table lock for synchronization, ensuring that correct data is seen by the processes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Improper Resource Release

Weakness Enumeration

CWE-400

CWE-404

CWE-789

Related Identifiers

BDU:2026-03833

CVE-2022-49052

OESA-2025-1317

Affected Products

Astra Linux

Linux Kernel

References · 53

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49052.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49277 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49052 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49087 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49682 · Security Note
• https://bdu.fstec.ru/vul/2026-03833 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49414 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49513 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47656 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49488 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49052 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49514 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-58009 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49315 · Security Note