PT-2025-8010 · Linux+3 · Linux Kernel+3

Damien Le Moal · Published 2022-03-29 · Updated 2025-05-22 · CVE-2022-49082

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc8+

Description A use-after-free issue has been identified in the Linux kernel, specifically in the mpt3sas driver. The function mpt3sas transport port remove() frees the port field of the sas expander structure, leading to a use-after-free error when the ioc info() call is executed. This issue can be triggered when removing the driver module, such as during rmmod. The error is detected by KASAN, which reports a read of size 1 at an address that has already been freed.

Recommendations For Linux kernel versions prior to 5.17.0-rc8+, introduce a local variable port id to store the port ID value before executing mpt3sas transport port remove(). Then, use this local variable in the call to ioc info() instead of dereferencing the freed port structure.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-06551

CVE-2022-49082

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1355

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49082.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49082 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49082 · Vendor Advisory
• https://git.kernel.org/stable/c/17d66b1c92bcb41e72271ec60069d3684aaa1c9c · Patch
• https://git.kernel.org/stable/c/1bb8a7fc64d63ec818e367e1b37676ea2ef2d20c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49082 · Vendor Advisory