PT-2025-8267 · Linux+4 · Linux Kernel+4

Published 2022-06-08 · Updated 2026-05-26 · CVE-2022-49333

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc7+

Description The issue is related to the Linux kernel, specifically with the mlx5 get next phys dev() function, which was called without holding the interface lock. This problem was identified when a commit added an assert that verifies the interface lock is held. The vulnerability is associated with the E-Switch and offloads pairing using devcom, which should only be possible on devices that support LAG.

Recommendations For Linux kernel versions prior to 5.18.0-rc7+, update to a version that includes the fix for the issue where mlx5 get next phys dev() was called without holding the interface lock. As a temporary workaround, consider disabling the mlx5 esw offloads devcom event() function until a patch is available. Restrict access to the vulnerable module mlx5 core to minimize the risk of exploitation. Avoid using the devcom parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALSA-2025_16880

AZL-68618

BDU:2026-03673

CESA-2023_2951

CVE-2022-49333

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1307

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49333.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49333 · Vendor Advisory
• https://git.kernel.org/stable/c/cdbcdddb8076a09aa6ddaf20fd911fc787dca0e5 · Patch
• https://ubuntu.com/security/CVE-2022-49333 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03673 · Security Note
• https://git.kernel.org/stable/c/0cef0b7eb044bb8cfdaff4c1db55a8fd442f6bc9 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49333 · Security Note
• https://osv.dev/vulnerability/AZL-68618 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49333 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49333 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49333 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49333 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49333 · Vendor Advisory
• https://git.kernel.org/stable/c/3008e6a0049361e731b803c60fe8f3ab44e1d73f · Patch