PT-2025-8123 · Linux+1 · Linux Kernel+1

Vladimir Oltean · Published 2022-03-21 · Updated 2025-03-03 · CVE-2022-49195

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the DSA ( Distributed Switch Architecture) probing process. The issue occurs when a multi-chip tree fails to probe, causing a panic on shutdown. This happens because the driver binds to the device successfully but does not initialize the tree, leading to NULL pointer dereferences when the shutdown method is called. The problem is solved by checking if the setup has been previously initialized for the switch being shut down.

Recommendations For the affected Linux kernel versions, to resolve the issue, apply the provided patch that fixes the panic on shutdown by checking whether the setup has been previously initialized for the switch being shut down. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-04318

CVE-2022-49195

Affected Products

Astra Linux

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49195.json · Exploit
• https://git.kernel.org/stable/c/b864d5350c18bea9369d0bdd9e7eb6f6172cc283 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49195 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49195 · Vendor Advisory
• https://git.kernel.org/stable/c/95df5cd5a446df6738d2d45872e08594819080e4 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49195 · Vendor Advisory
• https://git.kernel.org/stable/c/b6e668ff43ebd87ccc8a19e5481345c428672295 · Patch
• https://git.kernel.org/stable/c/8fd36358ce82382519b50b05f437493e1e00c4a9 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49195 · Security Note
• https://ubuntu.com/security/CVE-2022-49195 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04318 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49195 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49195 · Security Note
• https://twitter.com/CVEnew/status/1896399793271755151 · Twitter Post
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.19 · Note