PT-2025-8125 · Linux+3 · Linux Kernel+3

Petr Machata · Published 2022-03-17 · Updated 2025-09-29 · CVE-2022-49197

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A shift out of bounds issue in the group mask calculation of the af netlink component has been identified. When a netlink message is received, the nl groups field, which carries the multicast group on which the message was received, can lead to out-of-bounds shift attempts if the group number exceeds 32. This can result in either a wrong non-zero value or zero being set in the nl groups field. To determine membership in groups 32 or higher, userspace should use nl pktinfo control messages, enabled by the NETLINK PKTINFO socket option.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Integer Overflow

Weakness Enumeration

CWE-125

CWE-190

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2026-03551

CVE-2022-49197

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2025:01600-1

SUSE-SU-2025_01600-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 245

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49197.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49197 · Security Note
• https://bdu.fstec.ru/vul/2026-03551 · Security Note
• https://git.kernel.org/stable/c/7409ff6393a67ff9838d0ae1bd102fb5f020d07a · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49197 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49197 · Vendor Advisory
• https://git.kernel.org/stable/c/f75f4abeec4c04b600a15b50c89a481f1e7435ee · Patch
• https://git.kernel.org/stable/c/ac5883a8890a11c00b32a19949a25d4afeaa2f5a · Patch
• https://osv.dev/vulnerability/CVE-2022-49197 · Vendor Advisory
• https://git.kernel.org/stable/c/e23e1e981247feb3c7d0236fe58aceb685f234ae · Patch
• https://git.kernel.org/stable/c/e8aaf3134bc5e943048eefe9f2ddaabf41d92b1a · Patch
• https://git.kernel.org/stable/c/e1c5d46f05aa23d740daae5cd3a6472145afac42 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49197 · Vendor Advisory
• https://git.kernel.org/stable/c/b0898362188e05b2202656058cc32d98fabf3bac · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49197 · Security Note