PT-2025-8389 · Linux+2 · Linux Kernel+2

Published 2025-02-26 · Updated 2025-04-15 · CVE-2022-49455

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue in the ocxl file register afu function has been resolved. The problem occurred because info release() is called in device unregister() when the reference count of info->dev is 0, making the subsequent calls to ocxl afu put() and kfree() unnecessary. This issue has been fixed by adding free minor() and returning to the err unregister error path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2022-49455

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1343

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49455.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/950cf957fe34d40d63dfa3bf3968210430b6491e · Patch
• https://osv.dev/vulnerability/CVE-2022-49455 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/9e9087cf34ee69f4e95d146ac29385d6e367a97b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49455 · Vendor Advisory
• https://git.kernel.org/stable/c/252768d32e92c1214aeebb5fec0844ca479bcf5c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49455 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49455 · Vendor Advisory
• https://git.kernel.org/stable/c/de65c32ace9aa70d51facc61ba986607075e3a25 · Patch
• https://git.kernel.org/stable/c/8fb674216835e1f0c143762696d645facebb4685 · Patch