PT-2025-8140 · Linux+2 · Linux Kernel+2

Claudiu Beznea + 5 · Published 2025-02-26 · Updated 2025-06-17 · CVE-2022-49212

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference counting issue in the Linux kernel has been identified, specifically in the atmel nand controller init function. This issue occurs in several error handling paths where the function returns an error code without properly balancing the reference count of the nc->dmac object, which was previously increased by dma request channel(). This can lead to refcount leaks.

Recommendations To resolve this issue, apply the fix that decrements the refcount of the specific object in the error paths. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49212

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1640

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49212.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49212 · Vendor Advisory
• https://git.kernel.org/stable/c/f1694169f3674cdf7553aed06864254635679878 · Patch
• https://git.kernel.org/stable/c/8baea2b96fa90af8d0f937caf4cf2105ee094d93 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49212 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49212 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory
• https://git.kernel.org/stable/c/9843c9c98f26c6ad843260b19bfdaa2598f2ae1e · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49212 · Vendor Advisory
• https://git.kernel.org/stable/c/0856bf27057561f42b37df111603cf5a0d040294 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a3587259ae553e41d1ce8c7435351a5d6b299a11 · Patch