PT-2025-8073 · Linux+4 · Linux Kernel+4

Oliver Sang · Published 2022-03-25 · Updated 2025-09-29 · CVE-2022-49145

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resolved issue in the Linux kernel involves avoiding out of bounds access when parsing CPC data in the ACPI CPPC component. Specifically, if the NumEntries field in the CPC return package is less than 2, the code should not attempt to access the Revision element of that package, as it may not be present.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025_16880

BDU:2026-03656

CESA-2022_7683

CVE-2022-49145

OPENSUSE-SU-2025_1263-1

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:01983-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1653

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49145.json · Exploit
• https://git.kernel.org/stable/c/cb249f8c00f40dba83b7da8207ac14ca46e9ec9e · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49145 · Vendor Advisory
• https://git.kernel.org/stable/c/b3f15609ffa521de12244cd6af24002030dda3f5 · Patch
• https://git.kernel.org/stable/c/97b5593fd1b182b3fdb180b6bbe64ec09669988b · Patch
• https://git.kernel.org/stable/c/40d8abf364bcab23bc715a9221a3c8623956257b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49145 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d208ea44e25b31db5a4d5e8c31df51787a3e9303 · Patch
• https://git.kernel.org/stable/c/28d5387c1994f5e1e0d41b30a1f3dd6e1f609252 · Patch
• https://git.kernel.org/stable/c/d7339f2a3938fb56b5f28d53f5345900b5fa0e74 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49145 · Security Note