PT-2025-8004 · Linux+2 · Linux Kernel+2

Douglas Miller · Published 2022-04-08 · Updated 2025-04-15 · CVE-2022-49076

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free bug has been identified in the Linux kernel, specifically in the hfi1 cleanup code. Under certain conditions, such as MPI Abort, the last reference to the task mm may be dropped, allowing the mm to be freed before its final use. This can lead to problems, including corruption of the mmap sem counter, resulting in a hang, or corruption of an mm struct that is in use by another task.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-04429

CVE-2022-49076

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:0834-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_0834-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1497

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49076.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49076 · Security Note
• https://git.kernel.org/stable/c/9ca11bd8222a612de0d2f54d050bfcf61ae2883f · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49076 · Vendor Advisory
• https://git.kernel.org/stable/c/2bbac98d0930e8161b1957dc0ec99de39ade1b3c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49076 · Security Note
• https://git.kernel.org/stable/c/5f54364ff6cfcd14cddf5441c4a490bb28dd69f7 · Patch
• https://ubuntu.com/security/CVE-2022-49076 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04429 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/0b7186d657ee55e2cdefae498f07d5c1961e8023 · Patch