PT-2025-8020 · Linux+2 · Linux Kernel+2

Published 2022-04-01 · Updated 2025-04-14 · CVE-2022-49092

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel related to the deletion of routes with nexthop objects. The issue occurs when trying to delete a route pointing to a nexthop id without specifying nhid but matching on an interface, resulting in a kernel warning. The warning is triggered by the fib info nh() function in include/net/nexthop.h. The vulnerability is caused by the kernel's attempt to delete a route with a nexthop object, which is managed separately.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

BDU:2026-04062

CVE-2022-49092

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1338

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49092.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49092 · Security Note
• https://git.kernel.org/stable/c/dcd689f9e2640c992f94eae9955b106f71c6825d · Patch
• https://git.kernel.org/stable/c/907c97986d6fa77318d17659dd76c94b65dd27c5 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49092 · Vendor Advisory
• https://git.kernel.org/stable/c/f5064531c23ad646da7be8b938292b00a7e61438 · Patch
• https://osv.dev/vulnerability/CVE-2022-49092 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f8db5743d09523c0bb35f16e13691e3b7eb5dba0 · Patch
• https://git.kernel.org/stable/c/63ea57478aaa3e06a597081a0f537318fc04e49f · Patch
• https://bdu.fstec.ru/vul/2026-04062 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49092 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49092 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory