PT-2025-8524 · Linux+3 · Linux Kernel+3

Liang He · Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49591

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak bug has been identified in the Linux kernel, specifically in the ksz common module of the microchip driver. The issue arises from the failure to call of node put() for the reference returned by of get child by name(), which increases the refcount. This bug has been resolved.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49591

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1328

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49591.json · Exploit
• https://git.kernel.org/stable/c/88ec2ff42da3ac93b2437dc52fe25cd4372148e6 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49591 · Vendor Advisory
• https://git.kernel.org/stable/c/4165e02716518bbbe9c9104b39530d40928bc7ce · Patch
• https://osv.dev/vulnerability/CVE-2022-49591 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49591 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a14bd7475452c51835dd5a0cee4c8fa48dd0b539 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49591 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49591 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49591 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49591 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory