PT-2025-8575 · Linux+6 · Linux Kernel+6

Jon Hunter · Published 2022-07-07 · Updated 2025-04-14 · CVE-2022-49642

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A long-standing issue in the Synopsys DWC Ethernet driver for Tegra194 has been identified, where random system crashes occur when the split header feature is enabled in the stmmac driver. The problem arises when a larger than expected buffer length is received, causing the calculation of the total buffer length to overflow, resulting in a kernel crash. The root cause of the larger buffer length is unclear, but feedback from the NVIDIA design team indicates that the split header feature is not supported for Tegra194.

Recommendations Disable split header support for Tegra194 to prevent random system crashes from occurring.

Exploit

Fix

Use of Insufficiently Random Values

Integer Overflow

Weakness Enumeration

CWE-330

CWE-190

Related Identifiers

BDU:2026-04002

CESA-2023_2951

CVE-2022-49642

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Synopsys Dwc Ethernet Driver

Tegra194

References · 1337

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49642.json · Exploit
• https://ubuntu.com/security/CVE-2022-49642 · Vendor Advisory
• https://git.kernel.org/stable/c/2968830c9b47ce093237483c6207c61065712386 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49642 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49642 · Vendor Advisory
• https://git.kernel.org/stable/c/d5c315a787652c35045044877a249f7d5c8a4104 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49642 · Security Note
• https://git.kernel.org/stable/c/029c1c2059e9c4b38f97a06204cdecd10cfbeb8a · Patch
• https://git.kernel.org/stable/c/9cc8edc571b871d974b3289868553f9ce544aba6 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49642 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49642 · Security Note