PT-2025-8385 · Linux+3 · Linux Kernel+3

Cristian Marussi · Published 2022-11-15 · Updated 2025-09-29 · CVE-2022-49451

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the enumeration of protocols implemented by the SCMI platform. The issue arises from improper validation of the number of returned protocols, which can lead to an overflow and silent bypass of the check if the returned value loop num ret is sufficiently large. This vulnerability is related to the BASE DISCOVER LIST PROTOCOLS protocol.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2025_16880

CVE-2022-49451

OESA-2025-1408

OPENSUSE-SU-2025_1263-1

RHSA-2022:8267

RHSA-2022_8267

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 1372

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49451.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49491 · Security Note
• https://git.kernel.org/stable/c/2ccfcd7a09c826516edcfe464b05071961aada3f · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49451 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49085 · Security Note
• https://ubuntu.com/security/CVE-2022-49451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53015 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49100 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49711 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49374 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52988 · Security Note