PT-2025-8643 · Linux+4 · Linux Kernel+4

Mikulas Patocka · Published 2022-06-16 · Updated 2025-04-16 · CVE-2022-49710

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A bug in the Linux kernel's dm-log code has been identified, where the region bitmap size is rounded up to 32 bits, but the allocated region is accessed using unsigned long pointers by the function find next zero bit le. On 64-bit architectures, this may result in accessing 4 bytes beyond the allocated size.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2026-03994

CESA-2022_7683

CVE-2022-49710

OPENSUSE-SU-2025_1263-1

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1500

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49710.json · Exploit
• https://git.kernel.org/stable/c/ae460312875159285cef5bf3dc654593f404a1ef · Patch
• https://git.kernel.org/stable/c/ba751f0d25f07aa21ce9b85372a3792bf7969d13 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49710 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49710 · Vendor Advisory
• https://git.kernel.org/stable/c/9a02f3275acc628c0d956be771405ced79ac36df · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/0d2209b54f1de0c2f99cab246d4cf2cfe24aaaa9 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49710 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49710 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory