PT-2025-8455 · Linux+2 · Linux Kernel+2

Published 2022-04-26 · Updated 2025-04-15 · CVE-2022-49522

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc1

Description A vulnerability in the Linux kernel has been resolved by applying DMA engine limits to the maximum segment size in the jz4740 MMC host driver. This change is necessary to prevent warnings that occur when the CONFIG DMA API DEBUG option is enabled. The issue arises when the DMA engine's capabilities are exceeded, resulting in warnings about mapping sg segments longer than the device claims to support.

Recommendations For Linux kernel versions prior to 5.18.0-rc1, update to a version that includes the fix for the jz4740 MMC host driver to prevent warnings and potential issues related to DMA engine limits.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2026-02618

CVE-2022-49522

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1350

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49522.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49522 · Vendor Advisory
• https://git.kernel.org/stable/c/353298cadbd4c7d8e8a16d6000066414694933c3 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49522 · Vendor Advisory
• https://git.kernel.org/stable/c/7923f95997a79cef2ad161a2facae64c25a0bca0 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49522 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49522 · Security Note
• https://git.kernel.org/stable/c/afadb04f1d6e74b18a253403f5274cde5e3fd7bd · Patch
• https://git.kernel.org/stable/c/a828920b9ec0d89d3011198d482b7fe224d2de19 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49522 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory