PT-2025-8190 · Linux+2 · Linux Kernel+2

Published 2022-02-05 · Updated 2025-04-14 · CVE-2022-49262

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue in the Linux kernel has been identified. This issue occurs when the CONFIG DM CRYPT option is enabled, leading to a kernel crash. The problem arises during the driver release process. Technical details include a call trace involving functions such as crypto unregister alg(), crypto unregister skciphers(), otx2 cpt crypto exit(), and otx2 cptvf remove(). No information is provided about the estimated number of potentially affected devices or real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03512

CVE-2022-49262

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1334

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49262.json · Exploit
• https://git.kernel.org/stable/c/e6374086f249295121384bfaa7cdcc8d461146f0 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49262 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49262 · Security Note
• https://git.kernel.org/stable/c/a1bf728f3388ac3a2c2dffa57e25622e90b9f6f2 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49262 · Vendor Advisory
• https://git.kernel.org/stable/c/a462214866eebbca87e13ff6d73092b1c4895624 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03512 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49262 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49262 · Vendor Advisory
• https://git.kernel.org/stable/c/2d841af23ae8f398c85dd1ff2dc24b5ec8ba4569 · Patch