PT-2025-8056 · Linux+3 · Linux Kernel+3

Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49128

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where the pm runtime get sync() function increases the runtime PM counter even when it returns an error, potentially leading to a refcount leak. This is addressed by replacing pm runtime get sync() with pm runtime resume and get(), which does not alter the runtime PM counter in case of an error. Additionally, a matching decrement is necessary on the error handling path to maintain counter balance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-402

Related Identifiers

BDU:2026-01463

CVE-2022-49128

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1334

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49128.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49128 · Vendor Advisory
• https://git.kernel.org/stable/c/792533e54cd6e89191798ccd1abd590c62b9077e · Patch
• https://git.kernel.org/stable/c/ff13c90d7f7ab606b37be6d15140d19013d6736c · Patch
• https://git.kernel.org/stable/c/46f47807738441e354873546dde0b000106c068a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49128 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49128 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49128 · Vendor Advisory
• https://git.kernel.org/stable/c/9df80dc738926a2ea4bd1ce5993c3d0f4b0e855c · Patch
• https://cve.org/CVERecord?id=CVE-2022-49128 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49128 · Vendor Advisory