PT-2025-8203 · Linux+3 · Linux Kernel+3

Hangyu Hua · Published 2023-05-09 · Updated 2025-09-29 · CVE-2022-49275

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.0.x

Description A use after free issue in the Linux kernel has been resolved. The problem occurred in the m can tx handler() function, where can put echo skb() would clone and then free an skb. To fix this, the can put echo skb() call for version 3.0.x was moved directly before the start of transmission in hardware, similar to the fix in the 3.1.x branch.

Recommendations For Linux kernel version 3.0.x, update the kernel to include the fix that moves the can put echo skb() call before the start of transmission in hardware.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880

CVE-2022-49275

OESA-2025-1370

OPENSUSE-SU-2025_1263-1

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 1522

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49275.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-49275 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49395 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49095 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21785 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49235 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49407 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49354 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49275 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49517 · Security Note
• https://git.kernel.org/stable/c/2e8e79c416aae1de224c0f1860f2e3350fa171f8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53007 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49457 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory