PT-2025-8608 · Linux+4 · Linux Kernel+4

Published 2022-06-27 · Updated 2025-04-14 · CVE-2022-49675

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue arises from the combination of EXPORT SYMBOL and init annotations in the tick nohz full setup() function. This combination is problematic because the .init.text section is freed after initialization, and modules cannot use symbols annotated with init. Access to a freed symbol may result in a kernel panic. The modpost tool, which detects such issues, had been broken for a decade but was recently fixed, leading to the discovery of this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Improper Initialization

Weakness Enumeration

CWE-908

CWE-665

Related Identifiers

BDU:2026-03998

CESA-2023_7077

CVE-2022-49675

RHSA-2023:7077

RHSA-2023_7077

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1335

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49675.json · Exploit
• https://git.kernel.org/stable/c/ea32b27e2f8c58c92bff5ecba7fcf64b97707089 · Patch
• https://git.kernel.org/stable/c/c4ff3ffe0138234774602152fe67e3a898c615c6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49675 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49675 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49675 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49675 · Vendor Advisory
• https://git.kernel.org/stable/c/2390095113e98fc52fffe35c5206d30d9efe3f78 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49675 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03998 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f4a80ec8c51d68be4b7a7830c510f75080c5e417 · Patch