PT-2025-8432 · Linux+2 · Linux Kernel+2

Luca Weiss · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49499

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue has been resolved in the Linux kernel, specifically in the drm/msm component. The issue occurs when the 'aspace' is not set before being used, which can happen when IOMMU is not present, such as on msm8974 devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49499

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1298

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49499.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-49499 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49499 · Security Note
• https://git.kernel.org/stable/c/36a1d1bda77e1851bddfa9cf4e8ada94476dbaff · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f09937e80f9bc792965476c9a528f26c8fdc9179 · Patch
• https://osv.dev/vulnerability/CVE-2022-49499 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49499 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49499 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49499 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49499 · Vendor Advisory
• https://suse.com/security/cve/CVE-2022-49379 · Note
• https://suse.com/security/cve/CVE-2022-49467 · Note
• https://suse.com/security/cve/CVE-2023-3567 · Note