PT-2025-8418 · Linux+2 · Linux Kernel+2

Colin Ian King · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49485

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue has been found in the Linux kernel, specifically in the drm/v3d component. The problem occurs when the pointer perfmon is null, and the WARN ON return path is executed after the pointer has already been dereferenced. This issue is resolved by only dereferencing perfmon after it has been null checked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49485

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1300

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49485.json · Exploit
• https://git.kernel.org/stable/c/4be045434923e549a50846a066a04b7b6c1d6d33 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49485 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49485 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49485 · Security Note
• https://ubuntu.com/security/CVE-2022-49485 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49485 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ce7a1ecf3f9f1fccaf67295307614511d8e11b13 · Patch
• https://git.kernel.org/stable/c/3b72deb784a7d4ae8519a5c584cd87c4b57aa6c8 · Patch
• https://osv.dev/vulnerability/CVE-2022-49485 · Vendor Advisory
• https://git.kernel.org/stable/c/1df8f8901babcc8c8eea2c067179e455b5c828fd · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49485 · Security Note
• https://suse.com/security/cve/CVE-2022-49379 · Note