PT-2025-8654 · Linux+3 · Linux Kernel+3

Published 2022-06-15 · Updated 2025-04-14 · CVE-2022-49721

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc2-00002-g4d9ead8b45ce

Description The issue arises from inconsistent handling of PLT entries in the Linux kernel's ftrace functionality. Specifically, the ftrace modify call() function does not handle PLT entries correctly, leading to potential internal ftrace errors or kernel panics. This can occur when ftrace modify call() is used for a callsite that requires a PLT entry for a trampoline. The estimated number of potentially affected devices is not provided.

Recommendations For Linux kernel versions prior to 5.19.0-00002-g4d9ead8b45ce, consider updating to a newer version that includes the fix for consistently handling PLT entries. As a temporary workaround, avoid using the ftrace modify call() function for callsites that require a PLT entry for a trampoline.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2026-03710

CVE-2022-49721

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 1335

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49721.json · Exploit
• https://git.kernel.org/stable/c/dcecc96ed16f73417de5550f384e348c9d56f279 · Patch
• https://bdu.fstec.ru/vul/2026-03710 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49721 · Vendor Advisory
• https://git.kernel.org/stable/c/bc28fde90937a920f7714ec4408269cac744f796 · Patch
• https://git.kernel.org/stable/c/db73aa9466338ec821ed2a0b01721fe4d06876b1 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49721 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49721 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49721 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49721 · Vendor Advisory
• https://git.kernel.org/stable/c/a6253579977e4c6f7818eeb05bf2bc65678a7187 · Patch