PT-2025-8503 · Linux+2 · Linux Kernel+2

Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49570

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an integer overflow in the gpio-xilinx component of the Linux kernel. The current implementation cannot configure more than 32 pins due to an incorrect data type. The fix involves type casting with unsigned long to avoid the integer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2022-49570

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1327

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49570.json · Exploit
• https://git.kernel.org/stable/c/32c094a09d5829ad9b02cdf667569aefa8de0ea6 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49570 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49570 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49570 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49570 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49570 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49570 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6f16a5390640807dde420ee5ccbc4c95577aea6a · Patch
• https://osv.dev/vulnerability/CVE-2022-49570 · Vendor Advisory
• https://git.kernel.org/stable/c/e129e5486b981d324057e6986059f852658b0d00 · Patch