PT-2025-8074 · Linux+1 · Linux Kernel+1

Published 2022-03-28 · Updated 2025-03-03 · CVE-2022-49146

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue occurs when waking up a suspended virtual machine (VM), causing the kernel to print a trace for virtio drivers that do not directly call virtio device ready() in the .restore function. This happens because the .enable cbs callback is not invoked in virtio device restore(), which is used by some transports to enable interrupts. The fix involves calling virtio device ready() to set the DRIVER OK status bit and avoid setting it twice for certain drivers.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix, which involves calling virtio device ready() in virtio device restore() to ensure proper handling of virtio drivers after a suspended VM is resumed. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2026-04070

CVE-2022-49146

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49146.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49146 · Security Note
• https://git.kernel.org/stable/c/4ae431113179d72c668b61df320af0c06d1aa5c5 · Patch
• https://osv.dev/vulnerability/CVE-2022-49146 · Vendor Advisory
• https://git.kernel.org/stable/c/8d65bc9a5be3f23c5e2ab36b6b8ef40095165b18 · Patch
• https://ubuntu.com/security/CVE-2022-49146 · Vendor Advisory
• https://git.kernel.org/stable/c/94e9f5da39ee5f8ea31be1585de31c54f10dedce · Patch
• https://bdu.fstec.ru/vul/2026-04070 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49146 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49146 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49146 · Vendor Advisory
• https://twitter.com/CVEnew/status/1896414968406512036 · Twitter Post
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.19 · Note
• https://git.kernel.org/linus/8d65bc9a5be3f23c5e2ab36b6b8ef40095165b18 · Note