PT-2025-8498 · Linux+3 · Linux Kernel+3

Vince Weaver · Published 2023-05-09 · Updated 2025-09-29 · CVE-2022-49565

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to unchecked MSR access error on HSW. The issue occurs when the TSX is disabled on a machine with the LBR format LBR FORMAT EIP FLAGS2, and a TSX quirk is required to access LBR from registers. The lbr from signext quirk needed() function is introduced to determine whether the TSX quirk should be applied, but it is invoked before the intel pmu lbr init(), which parses the LBR format information. This results in the TSX quirk never being applied. The fix involves moving the lbr from signext quirk needed() into the intel pmu lbr init().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ALSA-2025_16880

CVE-2022-49565

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 1299

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49565.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49565 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49565 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49565 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49565 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49565 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49565 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49565 · Vendor Advisory
• https://git.kernel.org/stable/c/625bcd0685a1612225df83468c83412fc0edb3d7 · Patch
• https://git.kernel.org/stable/c/b0380e13502adf7dd8be4c47d622c3522aae6c63 · Patch
• https://suse.com/security/cve/CVE-2022-49579 · Note
• https://suse.com/security/cve/CVE-2022-49433 · Note
• https://bugzilla.suse.com/1237785 · Note