PT-2025-8002 · Linux+3 · Linux Kernel+3

Published 2022-03-15 · Updated 2025-10-14 · CVE-2022-49074

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, related to the irqchip/gic-v3 component. The problem lies in the polling of GICR CTLR.RWP in the redistributors, where the distributor bit index is incorrectly checked instead of the correct bit number in the RDs. This mistake went unnoticed for 8 years.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-399

CWE-20

Related Identifiers

BDU:2025-06045

CVE-2022-49074

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1494

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49074.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49074 · Security Note
• https://git.kernel.org/stable/c/3c07cc242baf83f0bddbbd9d7945d0bee56d8b57 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49074 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://git.kernel.org/stable/c/60e1eb4811f53f5f60c788297d978515e7a2637a · Patch
• https://git.kernel.org/stable/c/c7daf1b4ad809692d5c26f33c02ed8a031066548 · Patch
• https://osv.dev/vulnerability/CVE-2022-49074 · Vendor Advisory