PT-2025-8244 · Linux+3 · Linux Kernel+3

Hangyu Hua · Published 2022-01-01 · Updated 2025-04-14 · CVE-2022-49310

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the xillybus char driver. The problem arises from the use of usb get dev in xillyusb probe, which requires a corresponding call to usb put dev before the device xdev is released to prevent the leak.

Recommendations For the affected Linux kernel version, consider applying the fix that includes calling usb put dev before releasing xdev to mitigate the refcount leak issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49310

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1328

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49310.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49310 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49310 · Vendor Advisory
• https://git.kernel.org/stable/c/b67d19662fdee275c479d21853bc1239600a798f · Patch
• https://cve.org/CVERecord?id=CVE-2022-49310 · Security Note
• https://git.kernel.org/stable/c/bc8fceda3b89006e8a7dda8a097d36045d044c25 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49310 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49310 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49310 · Vendor Advisory
• https://git.kernel.org/stable/c/21f1f167d727f3f857e26d509ef5a6d47fd31bc3 · Patch
• https://git.kernel.org/stable/c/e277b95acdab84cd5d2f8d537a37aef6d21e988b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory