PT-2025-8326 · Linux+2 · Linux Kernel+2

Miaoqian Lin · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49392

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential NULL dereference issue has been identified in the Linux kernel, specifically in the aspeed vuart probe function related to the 8250 aspeed vuart serial component. The issue arises because platform get resource() may return NULL, and its return value should be checked to prevent a NULL pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49392

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1328

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49392.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49392 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49392 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49392 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/90a6b6fc52bfdcfe9698454bf5bea26112abbcd1 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49392 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49392 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49392 · Vendor Advisory
• https://git.kernel.org/stable/c/0e0fd55719fa081de6f9e5d9e6cef48efb04d34a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49392 · Vendor Advisory
• https://git.kernel.org/stable/c/923d34ce069e8e51a4d003caa6b66a8cd6ecd0ed · Patch