PT-2025-8195 · Linux+4 · Linux Kernel+4

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49267

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue has been identified in the Linux kernel's MMC core, which used the sprintf() function for sysfs output. This function is vulnerable to buffer overflow. The issue was discovered by the Linux Verification Center using the SVACE static analysis tool. The problem has been resolved by replacing sprintf() with the sysfs emit() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

AZL-68612

BDU:2026-01494

CVE-2022-49267

RHSA-2024:9315

RHSA-2024_9315

USN-8060-1

USN-8060-2

USN-8060-3

USN-8060-4

USN-8060-5

USN-8060-6

USN-8060-7

USN-8070-1

USN-8070-2

USN-8070-3

USN-8098-1

USN-8098-2

USN-8098-3

USN-8098-4

USN-8098-5

USN-8098-6

USN-8098-7

USN-8098-8

USN-8098-9

USN-8107-1

USN-8112-1

USN-8112-2

USN-8112-3

USN-8112-4

USN-8112-5

Affected Products

Debian

Linuxmint

Linux Kernel

Red Hat

Ubuntu

References · 87

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49267.json · Exploit
• https://ubuntu.com/security/notices/USN-8060-3 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8098-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21780 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8060-2 · Vendor Advisory
• https://git.kernel.org/stable/c/659ca56b5415c7a1d05e185c36fad80ba165d063 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49267 · Security Note
• https://ubuntu.com/security/CVE-2024-47659 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8060-5 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8060-6 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8098-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49267 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47599 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8098-6 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56640 · Vendor Advisory