PT-2025-7990 · Linux+3 · Linux Kernel+3

Dave Wysochanski · Published 2022-04-05 · Updated 2025-05-22 · CVE-2022-49062

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc1-nfs-fscache-netfs+ #13

Description A slab-out-of-bounds issue has been identified in the cachefiles set volume xattr function of the Linux kernel. This issue occurs when the actual length of volume coherency data is not used when setting the xattr, resulting in a KASAN report. The bug is triggered by a write of size 4 at a specific address, causing the kernel to access memory outside the bounds of a slab allocation. The issue is related to the cachefiles module and the fscache workqueue.

Recommendations For Linux kernel versions prior to 5.18.0-rc1-nfs-fscache-netfs+ #13, consider disabling the cachefiles set volume xattr function as a temporary workaround until a patch is available. Additionally, restricting access to the cachefiles module may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Use After Free

Weakness Enumeration

CWE-787

CWE-416

Related Identifiers

BDU:2025-06037

CVE-2022-49062

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1310

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49062.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-49062 · Vendor Advisory
• https://git.kernel.org/stable/c/09a5df1b88c8f126c8ff9938edf160edd4e92f42 · Patch
• https://bdu.fstec.ru/vul/2025-06037 · Security Note
• https://git.kernel.org/stable/c/7b2f6c306601240635c72caa61f682e74d4591b2 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49062 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49062 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49062 · Vendor Advisory