PT-2025-8364 · Linux+4 · Linux Kernel+4

Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49430

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc5-arm64-renesas-00116-g73636105874d-dirty #166

Description A vulnerability has been resolved in the Linux kernel. The issue is related to the gpio-keys module, which can either accept gpios or interrupts. The module initializes delayed work in case of gpios only and is only used if the debounce timer is not used. The vulnerability occurs when the gpio keys module is unloaded and an interrupt pin is used instead of GPIO, causing a warning and a call trace.

Recommendations For Linux kernel versions prior to 5.18.0-rc5-arm64-renesas-00116-g73636105874d-dirty #166, update to a newer version that includes the fix for this issue. As a temporary workaround, consider disabling the gpio keys module when using interrupt pins instead of GPIO to minimize the risk of exploitation.

Exploit

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2026-02219

CVE-2022-49430

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Red Hat

Suse

References · 1336

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49430.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49430 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/cee409bbba0d1bd3fb73064fb480ff365f453b5d · Patch
• https://git.kernel.org/stable/c/8b1ae300c2953257c146b5f0757537935c0b6027 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49430 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49430 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02219 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/96c460687813915dedca9dd7d04ae0e90607fd79 · Patch
• https://git.kernel.org/stable/c/4160e09619086fc155b51ccdb3462a3f233a5f4b · Patch
• https://cve.org/CVERecord?id=CVE-2022-49430 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49430 · Vendor Advisory