PT-2025-8366 · Linux+5 · Linux Kernel+5

Zeal Robot · Published 2022-05-22 · Updated 2025-11-12 · CVE-2022-49432

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak was found in the icp opal init() function. The of find compatible node() function returns a node pointer with refcount incremented, and use of node put() on it when done.

Recommendations For the Linux kernel, apply the fix for the refcount leak in the icp opal init() function by using of node put() on the node pointer returned by of find compatible node() when done.

Exploit

Fix

Weakness Enumeration

CWE-911

CWE-664

Related Identifiers

ALSA-2025:20518

BDU:2026-02220

CVE-2022-49432

INFSA-2025_20518

RHSA-2025:20518

RHSA-2025_20518

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Almalinux

Astra Linux

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 1722

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49432.json · Exploit
• https://git.kernel.org/stable/c/977dbc81d0f866ef63b93c127b7404f07734b3cc · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49432 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-20518.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20518-0.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6a61a97106279c2aa16fbbb2a171fd5dde127d23 · Patch
• https://ubuntu.com/security/CVE-2022-49432 · Vendor Advisory
• https://git.kernel.org/stable/c/df802880a7f9cd96b921b00639b00871f18a9a57 · Patch
• https://git.kernel.org/stable/c/9a42bc2494fadb453de00ce61042e588563ddc6d · Patch
• https://bdu.fstec.ru/vul/2026-02220 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49432 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:20518 · Vendor Advisory
• https://git.kernel.org/stable/c/1d5c8cea85fb1680eae8d645b96b92146cb4633c · Patch