PT-2025-8187 · Linux+4 · Linux Kernel+4

Published 2022-02-28 · Updated 2025-09-29 · CVE-2022-49259

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified where a kobject is deleted before its child kobjects, triggering a WARN if one of the child kobjects has a named attribute group. This issue is usually benign but can cause warnings and errors, such as a sysfs group not being found for a kobject. The problem arises from the incorrect placement of kobject del() and kobject uevent().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-19

Related Identifiers

ALSA-2025_16880

BDU:2026-04042

CESA-2022_7683

CVE-2022-49259

OPENSUSE-SU-2025_1263-1

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1504

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49259.json · Exploit
• https://git.kernel.org/stable/c/3d7e32c8da45957326f56937e0471c686d1a7711 · Patch
• https://git.kernel.org/stable/c/cf0cb8686e55d9c022944bc6ba9e19e832889e83 · Patch
• https://git.kernel.org/stable/c/0b5924a14d64487ebd51127b0358d06066ef5384 · Patch
• https://git.kernel.org/stable/c/0f69288253e9fc7c495047720e523b9f1aba5712 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49259 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49259 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b2001eb10f59363da930cdd6e086a2861986fa18 · Patch
• https://git.kernel.org/stable/c/84fe3ca6e7910beb47ec13509d484f84fa2a41ad · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/efaa0e969261e97c1fdd8e0338e5dd3ba5b9219c · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49259 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49259 · Vendor Advisory