PT-2025-8631 · Linux+5 · Linux Kernel+5

Published 2022-06-08 · Updated 2026-04-29 · CVE-2022-49698

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the use of prandom instead of get random u32 in the netfilter component. This could potentially lead to a bug when updating per-cpu rnd state from a user context. The problem was identified in the nft ng random eval function, which is part of the nft numgen module. To fix this, the random driver is used instead, which also eliminates the need for a local prandom state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2026-04116

CESA-2022_7683

CVE-2022-49698

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

USN-7990-1

USN-7990-2

USN-7990-3

USN-7990-4

USN-7990-5

USN-7990-6

USN-8224-1

Affected Products

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Ubuntu

References · 58

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49698.json · Exploit
• https://ubuntu.com/security/CVE-2025-21780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23406 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7990-5 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21726 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49698 · Security Note
• https://git.kernel.org/stable/c/6ce71f83f798be7e1ca68707fec449fbecb38852 · Patch
• https://ubuntu.com/security/CVE-2025-40215 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40019 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47599 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49927 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8224-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37849 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7990-6 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23405 · Vendor Advisory