PT-2025-8367 · Linux+4 · Linux Kernel+4

Zheyu Ma · Published 2022-05-24 · Updated 2025-09-29 · CVE-2022-49433

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the RDMA/hfi1 component. The issue occurs when there is a failure during the probe of hfi1 before the sdma map lock is initialized, causing the hfi1 free devdata() function to attempt to use a lock that has not been initialized. This can lead to an INFO message and stack trace. The vulnerability is related to the use of the sdma map lock in the sdma clean() function, which is used for freeing the sdma map memory. The issue can be avoided by checking if sdma map is not NULL before attempting to use the lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Improper Initialization

Weakness Enumeration

CWE-908

CWE-665

Related Identifiers

ALSA-2025_16880

BDU:2026-04030

CESA-2022_7683

CVE-2022-49433

OESA-2025-1282

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1519

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49433.json · Exploit
• https://git.kernel.org/stable/c/30eb275e7ed588270ae159cc590a96658e0cfd8f · Patch
• https://osv.dev/vulnerability/CVE-2022-49433 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49685 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49447 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49661 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49253 · Security Note
• https://ubuntu.com/security/CVE-2022-49433 · Vendor Advisory
• https://git.kernel.org/stable/c/addb192000d8819c0b1553453994df9bb54c28db · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52572 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49433 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/fc0750e659db7b315bf6348902cc8ca3cdd4b8d8 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory