PT-2025-8050 · Linux+4 · Linux Kernel+4

Jordy Zomer · Published 2022-02-22 · Updated 2025-10-14 · CVE-2022-49122

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential issue in the Linux kernel has been identified, where the cmd variable could be used as a Spectre v1 gadget, potentially allowing the leakage of kernel memory contents to userspace via speculative execution. This is prevented by using array index nospec.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Validation of Array Index

Buffer Overflow

Weakness Enumeration

CWE-129

CWE-119

Related Identifiers

ALSA-2025_16880

BDU:2026-01465

CESA-2022_7683

CVE-2022-49122

OPENSUSE-SU-2025_1263-1

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

RHSA-2025:10005

RHSA-2025:10009

RHSA-2025:10179

RHSA-2025:10829

RHSA-2025:10830

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1509

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49122.json · Exploit
• https://git.kernel.org/stable/c/02cc46f397eb3691c56affbd5073e54f7a82ac32 · Patch
• https://git.kernel.org/stable/c/7ae2c5b89da3cfaf856df880af27d3bb32a74b3d · Patch
• https://osv.dev/vulnerability/CVE-2022-49122 · Vendor Advisory
• https://git.kernel.org/stable/c/71c8df33fd777c7628f6fbc09b14e84806c55914 · Patch
• https://git.kernel.org/stable/c/44e6cb3ab177faae840bb2c1ebda9a2539876184 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49122 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49122 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/76c94651005f58885facf9c973007f5ea01ab01f · Patch
• https://git.kernel.org/stable/c/cd9c88da171a62c4b0f1c70e50c75845969fbc18 · Patch
• https://git.kernel.org/stable/c/58880025e3362024f6d8ea01cb0c7a5df6c84ba6 · Patch
• https://ubuntu.com/security/CVE-2022-49122 · Vendor Advisory