PT-2025-8317 · Linux+1 · Linux Kernel+1

Published 2022-05-08 · Updated 2025-03-01 · CVE-2022-49383

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc5-arm64-renesas-00002-g10393723e35e #522

Description A bug in the Linux kernel has been identified, causing an "Invalid wait context" error during the restart callback. This issue arises when using the pm runtime get sync() function to turn on clocks during restart, instead of clk prepare enable(). The problem was noticed while testing with the renesas defconfig configuration.

Recommendations For Linux kernel version 5.17.0-rc5-arm64-renesas-00002-g10393723e35e #522, update the kernel to use clk prepare enable() instead of pm runtime get sync() for turning on clocks during restart. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2026-04036

CVE-2022-49383

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49383.json · Exploit
• https://git.kernel.org/stable/c/6505541e5298cea2b79da68ee626f583f8e18784 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49383 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04036 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49383 · Security Note
• https://git.kernel.org/stable/c/0a635239cd5484d8f2e702713ccc49ec82aa7594 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49383 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49383 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49383 · Security Note
• https://ubuntu.com/security/CVE-2022-49383 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49383 · Vendor Advisory
• https://git.kernel.org/stable/c/e4cf89596c1f1e33309556699f910ced4abbaf44 · Patch
• https://twitter.com/CVEnew/status/1895982067894366549 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4 · Note