PT-2025-8086 · Linux+5 · Linux Kernel+5

Abdul Haleem · Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49158

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.0-rc1-autotest #1

Description A warning message issue in the Linux kernel has been resolved. The problem occurred due to adisc being flushed, resulting in a warning message where a different error code type did not match the expected type. The issue was triggered in the qla2xxx driver.

Recommendations For Linux kernel versions prior to 5.13.0-rc1-autotest #1, update to a newer version to resolve the issue. As a temporary workaround, consider disabling the qla2xxx driver until a patch is available. Restrict access to the vulnerable qla2x00 async adisc sp done function to minimize the risk of exploitation. Avoid using the affected API endpoints related to the qla2xxx driver until the issue is resolved.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALSA-2025_16880

BDU:2026-01545

CESA-2022_7683

CVE-2022-49158

OPENSUSE-SU-2025_1263-1

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Debian

Linux Kernel

Red Hat

Suse

References · 1500

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49158.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-49158 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49158 · Vendor Advisory
• https://git.kernel.org/stable/c/d8fb8da69e194e0249b3cdb746ef09ce823ae26b · Patch
• https://bdu.fstec.ru/vul/2026-01545 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49158 · Security Note
• https://git.kernel.org/stable/c/b13baf97ddbc1a7e7536168383bc0d84c2204b03 · Patch
• https://git.kernel.org/stable/c/7a3457777c4f700c64836e78dc71e6ce459f62b8 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49158 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49158 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory