PT-2025-8433 · Linux+1 · Linux Kernel+1

Published 2022-05-06 · Updated 2025-02-27 · CVE-2022-49500

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, related to the wl1251 driver. The introduction of vmap'ed stacks caused stack parameters to be unusable for DMA, leading to kernel panic. This issue occurred in several places, making the wl1251 unuseable on certain devices, such as the OpenPandora. The problem was solved by allocating temporary buffers or using the wl1251 read32() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2026-03900

CVE-2022-49500

Affected Products

Astra Linux

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49500.json · Exploit
• https://git.kernel.org/stable/c/454744754cbf2c21b3fc7344e46e10bee2768094 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49500 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49500 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49500 · Vendor Advisory
• https://git.kernel.org/stable/c/da03bbfbf5acd1ab0b074617e865ad1e8a5779ef · Patch
• https://bdu.fstec.ru/vul/2026-03900 · Security Note
• https://ubuntu.com/security/CVE-2022-49500 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49500 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49500 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49500 · Security Note
• https://git.kernel.org/linus/454744754cbf2c21b3fc7344e46e10bee2768094 · Note
• https://twitter.com/CVEnew/status/1894895507295596767 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025022607-CVE-2022-49500-2b04@gregkh · Note