PT-2025-8487 · Linux+1 · Linux Kernel+1

Sultan Alsawaf · Published 2022-05-13 · Updated 2025-02-27 · CVE-2022-49554

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified, where the asynchronous zspage free worker does not properly defend against page migration, leading to potential races. This can cause the worker to lock a page that no longer belongs to the zspage, unsafely dereference page private(), or observe a spurious NULL pointer to the next page. The issue is resolved by using migrate read lock() in lock zspage() to synchronize with page migration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Race Condition

Weakness Enumeration

CWE-476

CWE-362

Related Identifiers

BDU:2026-04021

CVE-2022-49554

Affected Products

Astra Linux

Linux Kernel

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49554.json · Exploit
• https://git.kernel.org/stable/c/3674d8a8dadd03a447dd21069d4dacfc3399b63b · Patch
• https://osv.dev/vulnerability/CVE-2022-49554 · Vendor Advisory
• https://git.kernel.org/stable/c/fc658c083904427abbf8f18280d517ee2668677c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49554 · Vendor Advisory
• https://git.kernel.org/stable/c/c5402fb5f71f1a725f1e55d9c6799c0c7bec308f · Patch
• https://bdu.fstec.ru/vul/2026-04021 · Security Note
• https://git.kernel.org/stable/c/645996efc2ae391246d595832aaa6f9d3cc338c7 · Patch
• https://ubuntu.com/security/CVE-2022-49554 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49554 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49554 · Vendor Advisory
• https://git.kernel.org/stable/c/fae05b2314b147a78fbed1dc4c645d9a66313758 · Patch
• https://git.kernel.org/stable/c/2505a981114dcb715f8977b8433f7540854851d8 · Patch
• https://git.kernel.org/stable/c/3ec459c8810e658401be428d3168eacfc380bdd0 · Patch
• https://git.kernel.org/stable/c/8ba7b7c1dad1f6503c541778f31b33f7f62eb966 · Patch