PT-2025-8095 · Linux+2 · Linux Kernel+2

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49167

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the btrfs file system. The issue occurred during compressed reads, where the bio would be double completed on errors, leading to panics. This happened because the compression path would complete the bio if an error occurred after setting up compression bios, and then btrfs submit data bio() would also call bio endio() on the bio. The fix involves making btrfs submit compressed read() responsible for calling bio endio() on the bio in case of errors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Information Disclosure

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-200

CWE-266

Related Identifiers

BDU:2026-03105

CVE-2022-49167

Affected Products

Astra Linux

Debian

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49167.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-49167 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49167 · Security Note
• https://git.kernel.org/stable/c/4a4ceb2b990771c374d85d496a1a45255dde48e3 · Patch
• https://osv.dev/vulnerability/CVE-2022-49167 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49167 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03105 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49167 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49167 · Vendor Advisory
• https://git.kernel.org/stable/c/987b5df1d10355d377315a26e7fb6c72ded83c9f · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49167 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49167 · Vendor Advisory
• https://git.kernel.org/stable/c/f9f15de85d74e7eef021af059ca53a15f041cdd8 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49167 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note