PT-2025-8363 · Linux+4 · Linux Kernel+4

Douglas Miller · Published 2022-05-24 · Updated 2025-05-09 · CVE-2022-49429

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where the hfi1 module, when loaded with HFI1 CAP SDMA off, can cause a panic due to a NULL pointer dereference in the hfi1 write iter() function. This occurs through a sequence of function calls including sdma select user engine, hfi1 user sdma process request, and ultimately hfi1 write iter. The problem arises when the SDMA is disabled, leading to the panic.

Recommendations To resolve this issue, test for SDMA in the hfi1 write iter() function and fail the I/O with EINVAL when SDMA is disabled.

Exploit

Fix

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-476

Related Identifiers

BDU:2026-02568

CESA-2023_2951

CVE-2022-49429

OESA-2025-1465

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1525

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49429.json · Exploit
• https://bdu.fstec.ru/vul/2026-02568 · Security Note
• https://git.kernel.org/stable/c/33794e8e9bcb4affc0ebff9cdec85acc8b8a1762 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53032 · Security Note
• https://git.kernel.org/stable/c/e60ad83f645ee6fadd5a8057ba267aeec54f08fe · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52935 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21764 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49385 · Security Note
• https://git.kernel.org/stable/c/0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21761 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-58094 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://git.kernel.org/stable/c/32e6aea33944f364d51cd263e4cd236393a188b6 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory