PT-2025-8255 · Linux+3 · Linux Kernel+3

Kinglong Mee · Published 2022-05-31 · Updated 2025-04-16 · CVE-2022-49321

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue occurs when a rdma server returns a fault format reply, and the nfs v3 client treats it as a bcall when the bc service does not exist. This can lead to a NULL pointer dereference, causing a kernel bug. The rpcrdma bc receive call function is involved in this issue, and a debug message is printed when the callback XID is received. The vulnerability can cause a kernel crash, as indicated by the BUG message and the call trace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-02215

CVE-2022-49321

OPENSUSE-SU-2025_1263-1

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 1506

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49321.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/da99331fa62131a38a0947a8204c5208de7b0454 · Patch
• https://git.kernel.org/stable/c/11270e7ca268e8d61b5d9e5c3a54bd1550642c9c · Patch
• https://ubuntu.com/security/CVE-2022-49321 · Vendor Advisory
• https://git.kernel.org/stable/c/91784f3d77b73885e1b2e6b59d3cbf0de0a1126a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://git.kernel.org/stable/c/8dbae5affbdbf524b48000f9d357925bb001e5f4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49321 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49321 · Security Note
• https://git.kernel.org/stable/c/998d35a2aff4b81a1c784f3aa45cd3afff6814c1 · Patch
• https://git.kernel.org/stable/c/a3fc8051ee061e31db13e2fe011e8e0b71a7f815 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory