PT-2025-8259 · Linux+4 · Linux Kernel+4

Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49325

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the tcp->snd cwnd value being set to an illegal value. The issue arose from code breaking the assumption that tp->snd cwnd is greater than zero, leading to various bugs over the years. A warning was triggered by syzbot, prompting the need for a fix to catch when and where tp->snd cwnd is set to an illegal value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Assertion Failure

Information Disclosure

Weakness Enumeration

CWE-617

CWE-200

Related Identifiers

ALSA-2025_16880

BDU:2026-02566

CVE-2022-49325

RHSA-2022:8267

RHSA-2022_8267

SUSE-SU-2025:01600-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Red Hat

Suse

References · 1434

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49325.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49325 · Security Note
• https://git.kernel.org/stable/c/41e191fe72282e193a7744e2fc1786b23156c9e4 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49325 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49325 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49325 · Vendor Advisory
• https://git.kernel.org/stable/c/5aba0ad44fb4a7fb78c5076c313456de199a3c29 · Patch
• https://git.kernel.org/stable/c/40570375356c874b1578e05c1dcc3ff7c1322dbe · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:01600-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02566 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49325 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/3308676ec525901bf1656014003c443a60730a04 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49325 · Vendor Advisory