PT-2025-8012 · Linux+3 · Linux Kernel+3

Jamie Bainbridge · Published 2022-04-06 · Updated 2025-05-22 · CVE-2022-49084

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where the qede build skb() function assumes that build skb() always allocates memory successfully and proceeds to call skb reserve(). However, under memory pressure, build skb() can fail to allocate memory and return NULL, leading to a kernel panic because it attempts to reserve a NULL skb. The problem is resolved by adding a check to handle the case where build skb() fails to allocate memory.

Recommendations For the affected Linux kernel versions, add a check in the qede build skb() function to handle the case where build skb() returns NULL, indicating a failed memory allocation. This check should prevent the kernel panic by correctly handling the NULL return value.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

CWE-388

Related Identifiers

BDU:2025-06058

CVE-2022-49084

OESA-2025-1465

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1524

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49084.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://git.kernel.org/stable/c/e1fd0c42acfa22bb34d2ab6a111484f466ab8093 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47670 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b2d6b3db9d1cf80908964036dbe1c52a86b1afb1 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49084 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49429 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49084 · Vendor Advisory