PT-2025-8515 · Linux+1 · Linux Kernel+1

Vladimir Oltean · Published 2025-02-26 · Updated 2025-02-27 · CVE-2022-49582

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue exists in the Linux kernel, specifically in the dsa port reset vlan filtering() function. The issue arises when the ds iterator variable overwrites the dp argument, which is later used to call dsa port vlan filtering(). This can cause switches to dereference an invalid dp after leaving a VLAN-aware bridge. The issue affects switches where vlan filtering is global=true.

Recommendations To resolve this issue, use a dedicated other dp iterator variable in the dsa port reset vlan filtering() function to avoid overwriting the dp argument. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-49582

Affected Products

Astra Linux

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49582.json · Exploit
• https://ubuntu.com/security/CVE-2022-49582 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49582 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49582 · Vendor Advisory
• https://git.kernel.org/stable/c/1699b4d502eda3c7ea4070debad3ee570b5091b1 · Patch
• https://osv.dev/vulnerability/CVE-2022-49582 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49582 · Security Note
• https://git.kernel.org/stable/c/3240e12fe203a3a79b9814e83327106b770ed7b0 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49582 · Security Note
• https://twitter.com/CVEnew/status/1894867756153217520 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/1699b4d502eda3c7ea4070debad3ee570b5091b1 · Note