PT-2025-8131 · Linux+2 · Linux Kernel+2

Nicholas Kazlauskas · Published 2025-02-26 · Updated 2026-05-26 · CVE-2022-49203

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue occurs during the GPU reset code path in the Linux kernel. This happens because the link encoder assignments are not properly cleared after a GPU reset, resulting in a double free and eventually a NULL pointer dereference. The issue arises when the DC requires the link encoder assignments to remain cleared prior to committing, but the backup still contains valid assignments.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the double free during GPU reset on DC streams. Specifically, the fix involves not retaining the backed-up assignment and instead copying the current state assignment after the reset has occurred using the new link enc cfg copy() interface.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2022-49203

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1299

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49203.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49203 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49203 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49203 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49203 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49203 · Security Note
• https://git.kernel.org/stable/c/bbfcdd6289ba6f00f0cd7d496946dce9f6c600ac · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49203 · Vendor Advisory
• https://git.kernel.org/stable/c/32685b32d825ca08c5dec826477332df886c4743 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49203 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49203 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://bugzilla.suse.com/1237969 · Note
• https://suse.com/security/cve/CVE-2022-49748 · Note