PT-2025-8357 · Linux+1 · Linux Kernel+1

Published 2022-05-26 · Updated 2025-03-01 · CVE-2022-49423

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue has been identified in the Linux kernel. The problem occurs when the record variable is NULL before calling the osnoise init trace tool function. This issue is related to errors in the osnoise hist.c, osnoise top.c, timerlat hist.c, and timerlat top.c files. To fix this, a tag "out free" has been added to avoid dereferencing a NULL pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-04033

CVE-2022-49423

Affected Products

Astra Linux

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49423.json · Exploit
• https://git.kernel.org/stable/c/2a6b52ed72c822b5ee146a6a00ea66614fe02653 · Patch
• https://ubuntu.com/security/CVE-2022-49423 · Vendor Advisory
• https://git.kernel.org/stable/c/b0f1c686baff74d5df10f2f46670ef4e24a75756 · Patch
• https://osv.dev/vulnerability/CVE-2022-49423 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49423 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04033 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49423 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49423 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49423 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49423 · Security Note
• https://lore.kernel.org/linux-cve-announce/2025022654-CVE-2022-49423-e3fc@gregkh · Note
• https://git.kernel.org/linus/2a6b52ed72c822b5ee146a6a00ea66614fe02653 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1895982030477008958 · Twitter Post