PT-2025-8434 · Linux+3 · Linux Kernel+3

Lukas Wunner · Published 2022-01-01 · Updated 2025-04-14 · CVE-2022-49501

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the handling of USB Ethernet adapters. The issue arises from a use-after-free error on disconnect, which was attempted to be fixed by a commit that reversed the order of unbind and unregister netdev operations. However, this fix introduced asymmetry in the binding and unbinding process, leading to unnecessary stopping of a PHY (Physical Layer) device. The correct fix involves reverting this commit to restore the original order of operations.

Recommendations For the Linux kernel, revert the commit 2c9d6c2b871d to restore the original order of unbind and unregister netdev operations, allowing for the call to phy stop() to be unconditional in the ->stop() function.

Exploit

Fix

Use After Free

Double Free

Weakness Enumeration

CWE-416

CWE-415

Related Identifiers

BDU:2025-04338

CVE-2022-49501

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1336

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49501.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49501 · Security Note
• https://git.kernel.org/stable/c/6d5deb242874d924beccf7eb3cef04c1c3b0da79 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04338 · Security Note
• https://ubuntu.com/security/CVE-2022-49501 · Vendor Advisory
• https://git.kernel.org/stable/c/969a1b3ea3cb7d58a16fe12fd1b04bfc0ea40509 · Patch
• https://git.kernel.org/stable/c/d1408f6b4dd78fb1b9e26bcf64477984e5f85409 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49501 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49501 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49501 · Vendor Advisory
• https://git.kernel.org/stable/c/fbda837107f9bd4ec658d2aa88c6856dba606f06 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49501 · Security Note