PT-2025-8127 · Linux+4 · Linux Kernel+4

Dan Carpenter · Published 2022-03-18 · Updated 2025-09-29 · CVE-2022-49199

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the RDMA/nldev component. The issue arises from the function nldev stat set counter dynamic doit(), where the variable index is not properly checked for negative values, potentially leading to an underflow. This is addressed by changing the type of index to unsigned.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

ALSA-2025_16880

BDU:2026-03659

CESA-2022_7683

CVE-2022-49199

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1333

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49199.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49199 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49199 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03659 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49199 · Vendor Advisory
• https://git.kernel.org/stable/c/f6dd8669b8299a3a536cd92a7069152a7704da1d · Patch
• https://ubuntu.com/security/CVE-2022-49199 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49199 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/2a495ef04d5f42e6f00eb2bec1ee9075e3d5a771 · Patch
• https://git.kernel.org/stable/c/87e0eacb176f9500c2063d140c0a1d7fa51ab8a5 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49199 · Vendor Advisory