PT-2025-8120 · Linux+2 · Linux Kernel+2

Jan Sondhauss · Published 2022-03-23 · Updated 2025-04-14 · CVE-2022-49192

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified, where the cpsw ethtool begin function may return inconsistent values, leading to incorrect calls to pm runtime put. This inconsistency can cause the cpsw device to be left in a suspended state, resulting in access violations later on. The problem arises from the pm runtime get sync function returning 1 when the device is already active, which is the common case for cpsw ethtool begin.

Recommendations To resolve this issue, consider using the pm runtime resume and get function, which is designed to handle this situation more effectively. This function should be used in place of pm runtime get sync to ensure consistent runtime management and prevent the cpsw device from being suspended incorrectly.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-03657

CVE-2022-49192

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1305

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49192.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-49192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49192 · Security Note
• https://git.kernel.org/stable/c/30ad11bff021a94aff6dab1ec9236fdfd884fbff · Patch
• https://git.kernel.org/stable/c/459080fab12b23c0526026e5cedbf3fabb5457cc · Patch
• https://git.kernel.org/stable/c/585dc196a08fccdcd1b7fcf473cf566b34c4b840 · Patch
• https://ubuntu.com/security/CVE-2022-49192 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49192 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49192 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03657 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49192 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49192 · Vendor Advisory
• https://git.kernel.org/stable/c/2844e2434385819f674d1fb4130c308c50ba681e · Patch