PT-2025-8612 · Linux+2 · Linux Kernel+2

Miaoqian Lin · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49679

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically on ARM architectures, related to the axxia boot secondary function. The of find compatible node() function returns a node pointer with an incremented refcount, which should be decremented using of node put() when no longer needed to prevent a refcount leak.

Recommendations For the affected Linux kernel versions, add the missing of node put() call to avoid the refcount leak in the axxia boot secondary function.

Exploit

Fix

Related Identifiers

CVE-2022-49679

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1332

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49679.json · Exploit
• https://git.kernel.org/stable/c/b385cb59aac8d61c29bc72ebf3d19a536914af96 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/71e12e5b02674459a24f16e965255d63b31fe049 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49679 · Security Note
• https://git.kernel.org/stable/c/44a5b3a073e5aaa5720929dba95b2725eb32bb65 · Patch
• https://git.kernel.org/stable/c/a9b76c232a1ce4cbf27862097f7eb634dcc779eb · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49679 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49679 · Vendor Advisory
• https://git.kernel.org/stable/c/7c7ff68daa93d8c4cdea482da4f2429c0398fcde · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49679 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4d9c60e868f7cf8e09956e7d5bb44d807d712699 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49679 · Vendor Advisory