PT-2025-7993 · Linux+3 · Linux Kernel+3

Published 2022-04-06 · Updated 2025-05-22 · CVE-2022-49065

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19

Description A NULL dereference crash occurs in the Linux kernel when an svc rqst is deferred while the sunrpc tracing subsystem is enabled. This happens because svc revisit() sets dr->xprt to NULL, which cannot be relied upon in the tracepoint to provide the remote's address. The issue is related to the svc deferred event trace class in the SUNRPC subsystem.

Recommendations For Linux kernel versions prior to 5.19, consider applying the fix that converts the dr::addr field into a presentation address in the TP fast assign() arm of the trace event, and store that as a string, as a temporary workaround until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-06038

CVE-2022-49065

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1502

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49065.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49065 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/c2456f470eea3bd06574d988bf6089e7c3f4c5cc · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49065 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06038 · Security Note
• https://ubuntu.com/security/CVE-2022-49065 · Vendor Advisory