PT-2025-8099 · Linux+2 · Linux Kernel+2

Lee Jones + 1 · Published 2022-03-03 · Updated 2025-05-20 · CVE-2022-49171

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A bug in the Linux kernel has been resolved, specifically in the ext4 file system. The issue occurs when pages are dirtied without properly warning the file system in advance, which can lead to a BUG or potential data loss. This problem can be triggered by the process vm writev(2) system call. The kernel will now issue a warning and mark the page as clean to prevent unprivileged denial of service attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Resource Release

Assertion Failure

Weakness Enumeration

CWE-404

CWE-617

CWE-99

Related Identifiers

BDU:2026-01536

CVE-2022-49171

SUSE-SU-2025:01600-1

SUSE-SU-2025_01600-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 244

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49171.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49171 · Vendor Advisory
• https://git.kernel.org/stable/c/343117559ef41e992e326f7a92da1a8f254dfa8c · Patch
• https://git.kernel.org/stable/c/cc5095747edfb054ca2068d01af20be3fcc3634f · Patch
• https://git.kernel.org/stable/c/5a016c053f426a73752c3b41b60b497b58694d48 · Patch
• https://git.kernel.org/stable/c/5db60e76edf5680ff1f3a7221036fc44b308f146 · Patch
• https://ubuntu.com/security/CVE-2022-49171 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49171 · Security Note
• https://git.kernel.org/stable/c/330d0e44fc5a47c27df958ecdd4693a3cb1d8b81 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49171 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49171 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49171 · Vendor Advisory
• https://git.kernel.org/stable/c/a0856764dc1276ad2dc7891288c2e9246bf11a37 · Patch
• https://git.kernel.org/stable/c/677c9d30e8487bee6c8e3b034070319d98f6e203 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49171 · Vendor Advisory