PT-2025-8235 · Linux+2 · Linux Kernel+2

Published 2022-05-19 · Updated 2025-04-15 · CVE-2022-49301

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been identified in the Linux kernel, specifically in the staging: rtl8712 module. The issue arises when the r8712 usbctrl vendorreq() function returns a negative value, causing the data variable in usb read{8,16,32} to remain uninitialized. This can lead to the use of uninitialized values in various functions, including string nocheck and vsnprintf. The vulnerability is related to the r871xu drv init function and the usb probe interface function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Improper Initialization

Weakness Enumeration

CWE-908

CWE-665

Related Identifiers

BDU:2026-02597

CVE-2022-49301

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1350

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49301.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49301 · Vendor Advisory
• https://git.kernel.org/stable/c/d1b57669732d09da7e13ef86d058dab0cd57f6e0 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49301 · Vendor Advisory
• https://git.kernel.org/stable/c/de075af8c404f7d59ed34df230aedd9f645fb846 · Patch
• https://git.kernel.org/stable/c/58762f1c63c75cbe1dc393eed3c9cf8e38310ca1 · Patch
• https://git.kernel.org/stable/c/d7ed3c85da0b230bcdf5329acfe012ed093f3daa · Patch
• https://cve.org/CVERecord?id=CVE-2022-49301 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02597 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49301 · Vendor Advisory