PT-2025-8285 · Linux+2 · Linux Kernel+2

Miaoqian Lin · Published 2025-02-26 · Updated 2025-05-20 · CVE-2022-49351

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the altera tse mdio create function. The problem occurs because every iteration of for each child of node() decrements the reference count of the previous node. When breaking from a for each child of node() loop, it is necessary to explicitly call of node put() on the child node if it is no longer needed. The issue arises from a missing of node put() call, which is required to prevent a refcount leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49351

OESA-2025-1282

SUSE-SU-2025:01600-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1487

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49351.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49433 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49685 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49447 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52572 · Security Note
• https://git.kernel.org/stable/c/a013fa884d8738ad8455aa1a843b8c9d80c6c833 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/e31d9ba169860687dba19bdc8fccbfd34077f655 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49564 · Security Note
• https://git.kernel.org/stable/c/96bf5ed057df2d157274d4e2079002f9a9404bb8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-56606 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49404 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49439 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49044 · Security Note