PT-2025-8591 · Linux+2 · Linux Kernel+2

Kuee K1R0A · Published 2022-07-01 · Updated 2025-05-20 · CVE-2022-49658

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to insufficient bounds propagation in the Linux kernel's bpf (Berkeley Packet Filter) functionality. Specifically, it concerns the adjust scalar min max vals function, where a corner case allows for leaking pointers by turning a pointer register into an unknown scalar. This can occur when the tnum becomes constant after a call to reg bound offset(), but the register's bounds are not updated accordingly. The problem arises from the intersection with var off not being performed via update reg bounds(), leading to a 'malformed' constant. To address this, the code has been refactored to introduce a reg bounds sync() helper, ensuring consistent bounds correction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2026-03704

CVE-2022-49658

SUSE-SU-2025:01600-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1432

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49658.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49658 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49658 · Vendor Advisory
• https://git.kernel.org/stable/c/b2a28bb36664c94375926cbbb91976242847699d · Patch
• https://git.kernel.org/stable/c/e917be1f83ea14a68b3cf64d3da9968eaf991dae · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:01600-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49658 · Vendor Advisory
• https://git.kernel.org/stable/c/a7de8d436db92bab8b1f44624297c2554a6ac36b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49658 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49658 · Security Note
• https://git.kernel.org/stable/c/3844d153a41adea718202c10ae91dc96b37453b5 · Patch
• https://ubuntu.com/security/CVE-2022-49658 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03704 · Security Note