PT-2025-8062 · Linux+2 · Linux Kernel+2

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49134

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where the driver does not properly guard against invalid local ports when processing events generated by the device's firmware. Specifically, the driver does not protect itself from events reported for the CPU port (local port 0), which can result in a NULL pointer dereference when trying to access 'struct mlxsw sp port' fields that are not initialized for the CPU port.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-58575

BDU:2026-01539

CVE-2022-49134

SUSE-SU-2025:0834-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_0834-1

SUSE-SU-2025_1241-1

Affected Products

Debian

Linux Kernel

Suse

References · 1454

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49134.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49134 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49134 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49134 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49134 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4cad27ba2e5a5843a7fab5aa30de2b8e8c3db3a8 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49134 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-58575 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49134 · Vendor Advisory
• https://git.kernel.org/stable/c/bcdfd615f83b4bd04678109bf18022d1476e4bbf · Patch
• https://bdu.fstec.ru/vul/2026-01539 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49134 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49134 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:0834-1 · Vendor Advisory