PT-2025-8409 · Linux+2 · Linux Kernel+2

Thinerlogoer · Published 2025-02-26 · Updated 2026-05-26 · CVE-2022-49476

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.14-1.fc32.qubes.x86 64

Description A kernel crash issue has been identified in the Linux kernel, specifically in the mt7921 driver. The crash occurs when the mt7921 irq handler function is called while devm free irq is being handled, causing a NULL pointer dereference. This issue is related to the premature freeing of the mt76 device. A crash log has been provided, showing a kernel NULL pointer dereference error.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the mt7921 driver. As a temporary workaround, consider disabling the mt7921 irq handler function until a patch is available. Restrict access to the vulnerable mt76 device to minimize the risk of exploitation. Avoid using the devm free irq function in conjunction with the mt7921 irq handler function until the issue is resolved.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49476

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1300

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49476.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49476 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49476 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49476 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49476 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/677e669973bf5460705bc65033445ea9f6615999 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49476 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49476 · Vendor Advisory
• https://git.kernel.org/stable/c/ad483ed9dd5193a54293269c852a29051813b7bd · Patch
• https://git.kernel.org/stable/c/09693f5b636fb3f6dd56fd943226fc1bbc600b51 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49476 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49476 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://bugzilla.suse.com/1237969 · Note