PT-2025-8433 · Linux +1 · Linux Kernel +1

Published 2025-02-26 · Updated 2025-02-27 · CVE-2022-49500

Positive Technologies · (AI Summary)

CVSS v3.1

5.5

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, related to the wl1251 driver. The introduction of vmap'ed stacks caused stack parameters to be unusable for DMA, leading to kernel panic. This issue occurred in several places, making the wl1251 unuseable on certain devices, such as the OpenPandora. The problem was solved by allocating temporary buffers or using the

wl1251 read32()

function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-49500

Affected Products

Astra Linux

Linux Kernel

References · 14

• https://wiki.astralinux.ru/pages/viewpage.action?pageId=158612043 · Vendor Advisory
• https://git.kernel.org/stable/c/454744754cbf2c21b3fc7344e46e10bee2768094 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49500 · Security Note
• https://git.kernel.org/stable/c/da03bbfbf5acd1ab0b074617e865ad1e8a5779ef · Patch
• https://cve.org/CVERecord?id=CVE-2022-49500 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49500 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49500 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49500 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49500 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49500 · Vendor Advisory
• https://git.kernel.org/linus/454744754cbf2c21b3fc7344e46e10bee2768094 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49500 · Note
• https://twitter.com/CVEnew/status/1894895507295596767 · Twitter Post