PT-2025-8323 · Linux+3 · Linux Kernel+3

Hangyu Hua · Published 2022-11-15 · Updated 2025-09-29 · CVE-2022-49389

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak was found in the Linux kernel's usbip stub probe() function. The issue occurs when usb get dev() is called in stub device alloc() and stub probe() fails afterwards, requiring usb put dev() to be called to release the reference. This was fixed by moving usb put dev() to the sdev free error path handling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ALSA-2025_16880

CVE-2022-49389

OESA-2025-1408

OPENSUSE-SU-2025_1263-1

RHSA-2022:8267

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 1524

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49389.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49491 · Security Note
• https://ubuntu.com/security/CVE-2022-49389 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49085 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49389 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53015 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49100 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49711 · Security Note
• https://git.kernel.org/stable/c/6bafee2f18af5e5ac125e42960bc65496d0e56a0 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49389 · Vendor Advisory
• https://git.kernel.org/stable/c/8afb048800919d0ab10c57983940eba956339f21 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49374 · Security Note