PT-2025-8213 · Linux+3 · Linux Kernel+3

Haibo Chen · Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49285

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to incorrect logic in the mma8452 driver, which could lead to a kernel dump when trying to show available scales in userspace. The problem occurred because the original logic used to get mma8452 data was wrong, and the use of to i2c client() was incorrect. This caused a NULL pointer dereference when handling the device. The correct logic uses dev to iio dev() to get the iio dev structure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03492

CVE-2022-49285

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1345

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49285.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49285 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49285 · Vendor Advisory
• https://git.kernel.org/stable/c/d2d9ebdbff79d87d27652578e6d1638ad3b5f3bf · Patch
• https://bdu.fstec.ru/vul/2026-03492 · Security Note
• https://git.kernel.org/stable/c/4c0bb583a4444cce224e8661090cbffc98e2fe07 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49285 · Vendor Advisory
• https://git.kernel.org/stable/c/c87b7b12f48db86ac9909894f4dc0107d7df6375 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49285 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49285 · Vendor Advisory