PT-2025-8003 · Linux+3 · Linux Kernel+3

Ethan Lien · Published 2022-03-07 · Updated 2025-05-22 · CVE-2022-49075

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the btrfs file system. The issue arises from an overflow in the qgroup reserve limit when using the fallocate function to allocate a large range, exceeding 4GiB. This occurs because the bytes changed variable is set as an unsigned int, which overflows when dealing with large allocations. As a result, the qgroup limit is broken. The problem is demonstrated by a test script that attempts to fallocate files larger than the set qgroup limit, showing that the limit is indeed exceeded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Buffer Overflow

Weakness Enumeration

CWE-190

CWE-119

Related Identifiers

BDU:2025-06049

CVE-2022-49075

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1467

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49075.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://git.kernel.org/stable/c/b642b52d0b50f4d398cb4293f64992d0eed2e2ce · Patch
• https://ubuntu.com/security/CVE-2022-49075 · Vendor Advisory
• https://git.kernel.org/stable/c/6bfff81286d4491f02dad7814bae5c77c9ad2320 · Patch
• https://git.kernel.org/stable/c/4b98799e181b4326a613108cf37acc1f55d21b45 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49075 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49075 · Vendor Advisory
• https://git.kernel.org/stable/c/f3d97b22a708bf9e3f3ac2ba232bcefd0b0c136b · Patch