PT-2025-8146 · Linux+2 · Linux Kernel+2

Kees Cook · Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49218

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically an out-of-bounds (OOB) read when handling the Post Cursor2 register. The issue was found in the drm dp get adjust request post cursor function, where the link status array was not large enough to read the Adjust Request Post Cursor2 register. This led to an OOB read error. The vulnerability was identified with a -Warray-bounds build.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

AZL-58832

CVE-2022-49218

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Debian

Linux Kernel

Suse

References · 1329

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49218.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49218 · Vendor Advisory
• https://git.kernel.org/stable/c/a2151490cc6c57b368d7974ffd447a8b36ade639 · Patch
• https://ubuntu.com/security/CVE-2022-49218 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49218 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-58832 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49218 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49218 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49218 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49218 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49218 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49218 · Security Note