PT-2025-8148 · Linux+3 · Linux Kernel+3

Tong Zhang · Published 2022-02-17 · Updated 2025-09-29 · CVE-2022-49220

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A bug in the Linux kernel can be triggered by loading and then removing the nd pmem module, causing objects to remain in the dax cache during shutdown. This issue is due to the dax fs exit() function not flushing inodes before destroying the cache. The problem can be reproduced with the command $ modprobe nd pmem && modprobe -r nd pmem, leading to a BUG dax cache message and a call trace indicating the error.

Recommendations To fix this issue, call rcu barrier() before destroying the cache.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

ALSA-2025_16880

BDU:2026-03661

CVE-2022-49220

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2025:1293-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 499

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49220.json · Exploit
• https://git.kernel.org/stable/c/f2a1e0eb70c2d954176c07d75d28742bde30e9f3 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49220 · Security Note
• https://git.kernel.org/stable/c/770d42fff12d8595adda9025a0b92091f543e775 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49220 · Vendor Advisory
• https://git.kernel.org/stable/c/e2951eaa9398415ac054b7bd80b8163b6838ead4 · Patch
• https://git.kernel.org/stable/c/ec376f5c11c88c0215d173599db8449cd4196759 · Patch
• https://git.kernel.org/stable/c/a7e8de822e0b1979f08767c751f6c8a9c1d4ad86 · Patch
• https://git.kernel.org/stable/c/b786abe7c67c6ef71410c8e23292b3091d616ad1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49220 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49220 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49220 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49220 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49220 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03661 · Security Note