PT-2025-8545 · Linux+2 · Linux Kernel+2

Dorian Rudolph · Published 2022-06-09 · Updated 2025-02-27 · CVE-2022-49612

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the power supply core. The issue lies in the handling of boundary conditions by the functions power supply temp2resist simple and power supply ocv2cap simple. Specifically, the logic for interpolation is incorrect, leading to potential out-of-bounds reads. For instance, when the ocv value exceeds the first entry in the table, high is set to -1, causing an out-of-bounds access. Additionally, the interpolation logic in temp2resist does not produce the expected results, as demonstrated by an example where a temperature of 5 should yield a resistance of 70% but instead returns 60.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-787

CWE-119

Related Identifiers

BDU:2026-03915

CVE-2022-49612

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Astra Linux

Linux Kernel

Red Hat

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49612.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49612 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03915 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49612 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49612 · Vendor Advisory
• https://git.kernel.org/stable/c/093d27bb6f2d1963f927ef59c9a2d37059175426 · Patch
• https://git.kernel.org/stable/c/a762cee5d933fe4e2e1b773d60fc74fb8248d8c4 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49612 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49612 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49612 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49612 · Security Note
• https://lore.kernel.org/linux-cve-announce/2025022613-CVE-2022-49612-8875@gregkh/T · Note
• https://lore.kernel.org/linux-cve-announce/2025022613-CVE-2022-49612-8875@gregkh · Note
• https://twitter.com/CVEnew/status/1894867725635436785 · Twitter Post
• https://access.redhat.com/security/cve/cve-2022-49612 · Note