PT-2025-8258 · Linux+1 · Linux Kernel+1

Published 2022-04-26 · Updated 2025-03-21 · CVE-2022-49324

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the mips cpc default phys base function. The problem arises due to a missing of node put() call, which is necessary to release the refcount incremented by of find compatible node(). This leak can potentially lead to issues with resource management.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-402

Related Identifiers

BDU:2026-02603

CVE-2022-49324

OESA-2025-1317

Affected Products

Astra Linux

Linux Kernel

References · 56

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49324.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49277 · Security Note
• https://git.kernel.org/stable/c/4107fa700f314592850e2c64608f6ede4c077476 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49087 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49682 · Security Note
• https://git.kernel.org/stable/c/cc0aed22d33ced9e266c50bdf1cbe668c5acfdf8 · Patch
• https://bdu.fstec.ru/vul/2026-02603 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49414 · Security Note
• https://git.kernel.org/stable/c/8f843cdfc202caaa5d67db3395d893e56362e43a · Patch
• https://git.kernel.org/stable/c/1699ec1bfb59304a788901474f6bb003f7831b61 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49513 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47656 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49488 · Security Note
• https://git.kernel.org/stable/c/c667b3872a4c435a3f29d4e15971cd8c378b0043 · Patch