PT-2025-8588 · Linux+3 · Linux Kernel+3

Max Kellermann · Published 2022-07-05 · Updated 2025-04-14 · CVE-2022-49655

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Linux kernel's fscache, specifically when handling NFS files. If an NFS file is opened for writing, closed, and then modified locally, the cache contents may not be updated, potentially leading to file corruption. This issue arises when the cookie is in the LOOKING UP state and the request to invalidate doesn't get recorded. The fix involves setting a flag in fscache invalidate() to indicate the need for invalidation when the cookie is in the LOOKING UP state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

CWE-371

Related Identifiers

BDU:2026-03987

CVE-2022-49655

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 1303

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49655.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49655 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49655 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49655 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b1ae9f617f8a5c848d9205b8e228c6f0d1af754b · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49655 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49655 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49655 · Vendor Advisory
• https://git.kernel.org/stable/c/85e4ea1049c70fb99de5c6057e835d151fb647da · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49655 · Security Note
• https://bdu.fstec.ru/vul/2026-03987 · Security Note
• https://suse.com/security/cve/CVE-2022-49579 · Note
• https://suse.com/security/cve/CVE-2022-49433 · Note