PT-2025-8462 · Linux+3 · Linux Kernel+3

Huang Rui · Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49529

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the null pointer dereference issue in the drm/amdgpu/pm module.

Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the drm/amdgpu/pm module. This issue occurs when the smu is disabled and the pp funcs is not initialized, leading to a null pointer panic. The problem is triggered when the software smu is not enabled, and the kernel attempts to access an uninitialized pointer. This results in a kernel NULL pointer dereference error.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the null pointer dereference issue in the drm/amdgpu/pm module. As a temporary workaround, consider disabling the amdgpu dpm force performance level function until a patch is available. Restrict access to the vulnerable module amdgpu to minimize the risk of exploitation. Avoid using the affected API endpoints until the issue is resolved.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-58344

BDU:2026-03101

CVE-2022-49529

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1304

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49529.json · Exploit
• https://git.kernel.org/stable/c/49ec3441aa5e5940f3e82dd2f0205b9c856e399d · Patch
• https://cve.org/CVERecord?id=CVE-2022-49529 · Security Note
• https://bdu.fstec.ru/vul/2026-03101 · Security Note
• https://ubuntu.com/security/CVE-2022-49529 · Vendor Advisory
• https://git.kernel.org/stable/c/eea5c7b3390c6e006ba4cbd906447dd8cea8cfbf · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49529 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49529 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49529 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-58344 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49529 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49529 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49529 · Vendor Advisory