PT-2025-8042 · Linux+4 · Linux Kernel+4

Jianglei Nie · Published 2022-03-08 · Updated 2025-09-29 · CVE-2022-49114

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free issue has been identified in the Linux kernel, specifically in the fc exch abts resp() function. The fc exch release(ep) call decreases the reference count of ep, and when this count reaches zero, ep is freed. However, ep is still used in subsequent code, leading to a use after free condition. This issue is resolved by returning after the fc exch release() call to prevent the use after free.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the use after free in fc exch abts resp(). At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880

BDU:2026-01491

CESA-2023_2951

CVE-2022-49114

OESA-2025-1282

OPENSUSE-SU-2025_1263-1

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

RHSA-2025:10005

RHSA-2025:10009

RHSA-2025:10174

RHSA-2025:10179

RHSA-2025:10193

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1537

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49114.json · Exploit
• https://git.kernel.org/stable/c/5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49685 · Security Note
• https://git.kernel.org/stable/c/87909291762d08fdb60d19069d7a89b5b308d0ef · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49447 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49661 · Security Note
• https://git.kernel.org/stable/c/412dd8299b02e4410fe77b8396953c1a8dde183a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49253 · Security Note
• https://git.kernel.org/stable/c/6044ad64f41c87382cfeeca281573d1886d80cbe · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52572 · Security Note
• https://ubuntu.com/security/CVE-2022-49114 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/1d7effe5fff9d28e45e18ac3a564067c7ddfe898 · Patch
• https://bdu.fstec.ru/vul/2026-01491 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49114 · Vendor Advisory