PT-2025-8210 · Linux+1 · Linux Kernel+1

Juhyung Park · Published 2025-02-26 · Updated 2025-02-27 · CVE-2022-49282

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the f2fs file system. The issue is caused by a loop condition in the f2fs quota sync() function, where the cnt variable should be passed to sb has quota active() instead of type to check active quota properly. This can lead to a NULL pointer dereference when the type is -1. The vulnerability can cause a kernel panic and a fatal exception.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49282

Affected Products

Astra Linux

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49282.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49282 · Vendor Advisory
• https://git.kernel.org/stable/c/e9ebf1e8fc50b6a9336f9aea1082d7845e568d0e · Patch
• https://cve.org/CVERecord?id=CVE-2022-49282 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49282 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49282 · Vendor Advisory
• https://git.kernel.org/stable/c/680af5b824a52faa819167628665804a14f0e0df · Patch
• https://ubuntu.com/security/CVE-2022-49282 · Vendor Advisory
• https://git.kernel.org/stable/c/f9156db0987f1b426015d56505e2c58dee70c90d · Patch
• https://git.kernel.org/stable/c/e58ee6bd939b773675240f5d0f5b88a367c037c4 · Patch
• https://git.kernel.org/stable/c/724469814d805820cd37ea789769dba94123ff1a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49282 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49282 · Security Note
• https://git.kernel.org/stable/c/f1d5946d47c0827bae39e1537959ce8d6f0224c5 · Patch
• https://twitter.com/CVEnew/status/1894573471465967944 · Twitter Post