PT-2025-8583 · Linux+3 · Linux Kernel+3

Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49650

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the dmaengine, specifically the qcom bam dma component. The problem arose from unbalanced pm runtime get/put() calls when the bam is controlled remotely. This was caused by a commit that attempted to check if runtime pm was enabled, but instead introduced the imbalance. The fix involves reverting this change and enabling pm runtime in all cases, as the clk * functions already handle null clock cases properly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Underflow

Information Disclosure

Weakness Enumeration

CWE-191

CWE-200

Related Identifiers

BDU:2026-03703

CVE-2022-49650

OPENSUSE-SU-2025_1195-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1332

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49650.json · Exploit
• https://git.kernel.org/stable/c/2f6ded79068cac8cff41d5d5632564165d98ee12 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49650 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49650 · Vendor Advisory
• https://git.kernel.org/stable/c/b702a1077b51fcb39507cc3bd39206f539319a96 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49650 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49650 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49650 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03703 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49650 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1195-1 · Vendor Advisory
• https://git.kernel.org/stable/c/0ac9c3dd0d6fe293cd5044cfad10bec27d171e4e · Patch