Security readout for executives and security teams
Plain-English summary
CVE-2022-49751 is a Linux kernel availability issue in the w1 1-Wire subsystem. The reported failure is a kernel warning during driver removal after w1_process() leaves task state inconsistent. It requires local privileges and has no cited active exploitation.
Executive priority
Handle through normal kernel patch governance, with higher priority for Linux systems that use 1-Wire hardware or removable w1 drivers. It is not currently supported as internet-exploited or remotely reachable in the supplied evidence.
Technical view
The flaw involves w1_process() setting TASK_INTERRUPTIBLE inside its loop and not restoring TASK_RUNNING after leaving the loop. During ds2482 driver removal, later blocking operations can trigger a scheduler warning. CVSS is 5.5 with local attack vector, low privileges, no user interaction, and high availability impact.
Likely exposure
Exposure appears limited to Linux systems with affected kernel versions and relevant w1/1-Wire driver use, including ds2482-related paths. The source bundle lists Linux as the affected product and includes multiple stable kernel references, but does not provide deployment prevalence.
Exploitation context
The bundle marks KEV as false and provides no source claiming active exploitation. The CVSS vector indicates local, low-privilege conditions with availability impact only. No remote attack path or confidentiality/integrity impact is supported by the supplied sources.
Researcher notes
The key behavior is task-state cleanup in w1_process(), not an application-layer flaw. The public data is sparse: it names the warning, CVSS vector, affected Linux product, and stable commits, but does not include a proof of exploitation or detailed operational mitigations.
Mitigation direction
- Review vendor or distribution kernel advisories for CVE-2022-49751 applicability.
- Update to a kernel containing the referenced stable w1 fix.
- Prioritize systems using w1, 1-Wire, or ds2482-related drivers.
- Where updates are delayed, review whether affected w1 drivers are required.
Validation and detection
- Inventory Linux kernel versions across managed systems.
- Check whether w1, wire, or ds2482 drivers are present or loaded.
- Compare kernel builds against the referenced stable commits or vendor backports.
- Monitor kernel logs for related w1_process or scheduler warnings.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-49751 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H1.83.6CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
5.5MediumVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/190b5c3bbd5df685bb1063bda048831d72b8f1d4CVE reference, Linux
- https://git.kernel.org/stable/c/bccd6df4c177b1ad766f16565ccc298653d027d0CVE reference, Linux
- https://git.kernel.org/stable/c/276052159ba94d4d9f5b453fb4707d6798c6b845CVE reference, Linux
- https://git.kernel.org/stable/c/216f35db6ec6a667cd9db4838d657c1d2f4684daCVE reference, Linux
- https://git.kernel.org/stable/c/89c62cee5d4d65ac75d99b5f986f7f94290e888fCVE reference, Linux
- https://git.kernel.org/stable/c/cfc7462ff824ed6718ed0272ee9aae88e20d469aCVE reference, Linux
- https://git.kernel.org/stable/c/36225a7c72e9e3e1ce4001b6ce72849f5c9a2d3bCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.