PT-2025-8319 · Linux+2 · Linux Kernel+2

Schspa Shi · Published 2022-05-19 · Updated 2025-05-20 · CVE-2022-49385

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue was found in the Linux kernel. The problem occurs when the driver attach function fails, causing the driver private to be freed while still being part of the bus. This results in a UAF condition.

Recommendations To fix the issue, delete the driver from the bus when the driver attach function fails.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-10270

CVE-2022-49385

OESA-2025-1465

OPENSUSE-SU-2025_1263-1

RHSA-2025:14744

RHSA-2025:14749

SUSE-SU-2025:01600-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1509

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49385.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-21761 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22035 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21762 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/c059665c84feab46b7173d3a1bf36c2fb7f9df86 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49385 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22055 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01600-1 · Vendor Advisory
• https://git.kernel.org/stable/c/cdf1a683a01583bca4b618dd16223cbd6e462e21 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49232 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49429 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52935 · Security Note