PT-2025-8550 · Linux+3 · Linux Kernel+3

Pierre-Louis Bossart · Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49617

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where the device properties added for headset codecs are not removed if card registration fails, typically due to deferred probes. This can lead to kernel oopses in driver bind/unbind tests. The code that cleans up device properties when the card is removed can be moved as a helper and called upon card registration errors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-02228

CVE-2022-49617

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1333

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49617.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49617 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02228 · Security Note
• https://git.kernel.org/stable/c/fe154c4ff376bc31041c6441958a08243df09c99 · Patch
• https://osv.dev/vulnerability/CVE-2022-49617 · Vendor Advisory
• https://git.kernel.org/stable/c/09bca0ffc95c50369f1345d80ecfaca51864126f · Patch
• https://git.kernel.org/stable/c/f2556ce6b35ae0fc72000a4daa21ded12665e2f2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49617 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49617 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49617 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49617 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory