PT-2025-8092 · Linux+3 · Linux Kernel+3

Nicholas Piggin · Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49164

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A problem in the Linux kernel's powerpc/tm component has been identified, where a SLB miss can occur on the thread struct->ckpt regs while SCRATCH0 is live with the saved user r13 value, clobbering it with the kernel r13. This issue can result in kernel r13 being stored in ckpt regs. The problem is extremely unlikely to occur, requiring a specific sequence of events, including a SLB related MCE or the hypervisor discarding the SLB entry. The issue was found by inspection and is related to the handling of user r13 in treclaim and trechkpt.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2026-03553

CVE-2022-49164

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1496

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49164.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49164 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://git.kernel.org/stable/c/73d8082c90f17dfba57cad4ca94db5cae323f1b1 · Patch
• https://bdu.fstec.ru/vul/2026-03553 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49164 · Security Note
• https://git.kernel.org/stable/c/5dce84f475d13b773a1a4c823581cab25044d86a · Patch
• https://ubuntu.com/security/CVE-2022-49164 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49164 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49164 · Vendor Advisory