PT-2025-8009 · Linux+4 · Linux Kernel+4

Published 2022-04-08 · Updated 2025-09-29 · CVE-2022-49081

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc7

Description A vulnerability in the Linux kernel has been identified, which can cause runtime warnings when CONFIG DEBUG KMAP LOCAL is enabled. The issue arises from the kmap local sched {in,out} functions checking for unmapped slots in the tsk->kmap ctrl.pteval with pte none, which may not always return true, even if the slot is initialized with a 0 value. This can lead to warnings being generated, as seen in the provided call traces. The estimated number of potentially affected devices is not specified.

Recommendations For Linux kernel versions prior to 5.17.0-rc7, the issue can be resolved by replacing the check !pte none(pteval) with pte val(pteval) != 0 in the kmap local sched {in,out} functions. As a temporary workaround, consider disabling the CONFIG DEBUG KMAP LOCAL configuration option until a patch is available.

Exploit

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

ALSA-2025_16880

BDU:2025-06053

CESA-2024_3138

CVE-2022-49081

RHSA-2023:2458

RHSA-2023_2458

RHSA-2024:3138

RHSA-2024_3138

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49081.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49081 · Vendor Advisory
• https://git.kernel.org/stable/c/7dd5b3b97716a611fcf67d92fd2370fcb8d50372 · Patch
• https://git.kernel.org/stable/c/c21d040de6225414547d9bd31cd200f290991c85 · Patch
• https://bdu.fstec.ru/vul/2025-06053 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49081 · Vendor Advisory
• https://git.kernel.org/stable/c/85550b0f5fa5dd3c30469ea702c44444ef242c83 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49081 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49081 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49081 · Vendor Advisory
• https://git.kernel.org/stable/c/66f133ceab7456c789f70a242991ed1b27ba1c3d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49081 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49081 · Vendor Advisory
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-220525 · Note
• https://lore.kernel.org/linux-cve-announce/2025022657-CVE-2022-49081-7a0f@gregkh · Note