PT-2025-8240 · Linux+3 · Linux Kernel+3

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49306

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the assignment of ACPI companions to xHCI ports and USB devices in the dwc3 host. The problem occurred because the primary fwnode, which is the ACPI companion, was shared, and assigning it resulted in the replacement of the fwnode->secondary pointer for the parent dwc3 device. This was unintentional and could have led to potential side effects, such as resource leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ALSA-2025_16880

AZL-68615

CVE-2022-49306

RHSA-2022:8267

RHSA-2022_8267

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Debian

Linux Kernel

Red Hat

Suse

References · 1303

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49306.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49306 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49306 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49306 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-68615 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49306 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49306 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49306 · Vendor Advisory
• https://git.kernel.org/stable/c/9c185fde906a48368bd2d2a8c17d4b6fb3d670af · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49306 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49306 · Security Note
• https://git.kernel.org/stable/c/d7f35934f7ab67bfd9adabc84207e59da9c19108 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/7fd069d65da2e20b1caec3b7bcf9dfbe28c04bb2 · Patch