PT-2025-8458 · Linux+2 · Linux Kernel+2

Published 2022-04-24 · Updated 2025-05-20 · CVE-2022-49525

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A warning occurs when removing the cx25821 module in the Linux kernel. The issue arises from not freeing the irq before calling pci disable device(), resulting in a warning about removing a non-empty directory and a potential memory leak. The problem is fixed by freeing the irq before the pci disable device() call.

Recommendations For the affected Linux kernel versions, free the irq before calling pci disable device() to resolve the issue. Specifically, modify the code to include the necessary steps for freeing the irq, as indicated in the provided fix, to prevent the warning and potential memory leak when removing the cx25821 module.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-02266

CVE-2022-49525

OESA-2025-1432

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:01600-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1495

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49525.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1432 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49525 · Vendor Advisory
• https://git.kernel.org/stable/c/1f0fc1dfb5fdd456657519a97fab83691b96c6a0 · Patch
• https://git.kernel.org/stable/c/4d6295b6d986476232332fffd08575b185f90d81 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49399 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47407 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49525 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/2203436a4d24302871617373a7eb21bc17e38762 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49525 · Vendor Advisory
• https://git.kernel.org/stable/c/9d92291698e5cc35a2b8a1106a01ddd7d60ade2d · Patch
• https://git.kernel.org/stable/c/3f94169affa33c9db4a439d88f09cb2ed3a33332 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-58002 · Security Note