PT-2025-8280 · Linux+2 · Linux Kernel+2

Miaoqian Lin · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49346

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the lantiq gswip driver. The problem occurs when the for each available child of node() loop is terminated early, causing the reference count of the previous node to be decremented without a corresponding of node put() call. This results in a refcount leak. The issue is resolved by adding a missing of node put() call to avoid the leak.

Recommendations To resolve the issue, apply the fix that adds the missing of node put() call to the gswip gphy fw list function in the lantiq gswip driver.

Exploit

Fix

Related Identifiers

CVE-2022-49346

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 2807

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49346.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49346 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10249 · Security Note
• https://bdu.fstec.ru/vul/2025-04335 · Security Note
• https://bdu.fstec.ru/vul/2023-02626 · Security Note
• https://bdu.fstec.ru/vul/2025-06551 · Security Note
• https://bdu.fstec.ru/vul/2025-06301 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory