PT-2025-8423 · Linux+2 · Linux Kernel+2

Tomeu Vizoso · Published 2022-05-06 · Updated 2025-04-15 · CVE-2022-49490

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, where the mdp5 pipe release function does not check for errors returned by mdp5 get global state, potentially leading to a NULL dereference error. This issue arises when mdp5 get global state attempts to acquire the modeset lock and encounters a deadlock, resulting in a -EDEADLK error. To mitigate this, the mdp5 pipe release function has been modified to propagate any errors returned by mdp5 get global state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Improper Initialization

Weakness Enumeration

CWE-476

CWE-665

Related Identifiers

BDU:2026-04026

CVE-2022-49490

OESA-2025-1336

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:0834-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_0834-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1519

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49490.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/33dc5aac46e0fad8f5eb193e5906ed0eb6b66ceb · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49490 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49490 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49292 · Security Note
• https://git.kernel.org/stable/c/49dc28b4b2e28ef7564e355c91487996c1cbebd7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49508 · Security Note
• https://git.kernel.org/stable/c/776f5c58bfe16cf322d71eeed3c5dda1eeac7e6b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49625 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49381 · Security Note
• https://git.kernel.org/stable/c/04bef5f1ba8ea6d7c1c8f5f65e0395c62db59cb8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47659 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49535 · Security Note