PT-2025-8597 · Linux+3 · Linux Kernel+3

Shuang Li · Published 2022-11-08 · Updated 2025-02-27 · CVE-2022-49664

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference crash was reported in the Linux kernel. The issue occurs when a bc packet is received before the bc link is created, causing a dereference of a NULL pointer in the tipc link is up() function. This happens due to a gap between the insertion of a new node into the hashtable and the creation of the bc link. The crash is triggered when the tipc bcast rcv() function is called with a NULL pointer.

Recommendations To resolve this issue, apply the patch that moves the bc link creation before inserting the node into the hashtable. This ensures that the bc link is created before any bc packets are received, preventing the NULL pointer dereference crash.

Note: The exact version of the Linux kernel that contains the fix for this issue is not specified.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CESA-2022_7683

CVE-2022-49664

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49664.json · Exploit
• https://ubuntu.com/security/CVE-2022-49664 · Vendor Advisory
• https://git.kernel.org/stable/c/e52910e671f58c619e33dac476b11b35e2d3ab6f · Patch
• https://cve.org/CVERecord?id=CVE-2022-49664 · Security Note
• https://git.kernel.org/stable/c/456bc338871c4a52117dd5ef29cce3745456d248 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49664 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49664 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49664 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49664 · Vendor Advisory
• https://git.kernel.org/stable/c/35fcb2ba35b4d9b592b558c3bcc6e0d90e213588 · Patch
• https://git.kernel.org/stable/c/cb8092d70a6f5f01ec1490fce4d35efed3ed996c · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49664 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025022622-CVE-2022-49664-d3af@gregkh/T · Note
• https://twitter.com/CVEnew/status/1894592861493948584 · Twitter Post