PT-2025-8241 · Linux+2 · Linux Kernel+2

Zheyu Ma · Published 2022-04-14 · Updated 2025-04-18 · CVE-2022-49307

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null-pointer-dereference issue in the slgt clean() function of the synclink gt driver has been identified. This occurs when the driver fails at alloc hdlcdev() and the driver module is then removed, resulting in a general protection fault. The issue is caused by not checking if info->netdev is a null pointer before use.

Recommendations For the affected Linux kernel version, check whether info->netdev is a null pointer before calling detach hdlc protocol() to prevent the null-pointer-dereference. As a temporary workaround, consider disabling the slgt clean() function until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-02211

CVE-2022-49307

OESA-2025-1432

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1370

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49307.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/8a95696bdc0e13f8980f05b54a3b9081963d1256 · Patch
• https://osv.dev/vulnerability/OESA-2025-1432 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49399 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47407 · Security Note
• https://git.kernel.org/stable/c/d68d5e68b7f64de7170f8e04dd9b995c36b2c71c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ddd67751ab86c6a65f95c35293c42f85a42ac05d · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49307 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58002 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49307 · Security Note
• https://git.kernel.org/stable/c/ba08cbc5b53e151d0acf1930fb526fc65b7f3e65 · Patch
• https://git.kernel.org/stable/c/1ceb4ca9543a8a788febf6bc8dad2e605e172d5e · Patch
• https://git.kernel.org/stable/c/f6e07eb7ebec53ffe81fc2489589320fbe4a6b75 · Patch