PT-2025-25864 · Linux+4 · Linux Kernel+4

Publicado

2022-08-30

·

Atualizado

2026-03-14

·

CVE-2022-49938

CVSS v2.0

7.7

Alta

VetorAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak issue has been identified in the Linux kernel, specifically in the SMB2 negotiate() function. This issue occurs in cases of failure, such as dialect mismatches, where the response buffer from the mempool is not properly freed. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2026-01341
CVE-2022-49938
OESA-2025-1820
RHSA-2023:6583
RHSA-2023_6583
SUSE-SU-2025:02264-1
SUSE-SU-2025:02321-1
SUSE-SU-2025:02322-1
SUSE-SU-2025:02334-1
SUSE-SU-2025:02537-1
SUSE-SU-2025:2264-1
SUSE-SU-2025_02264-1
SUSE-SU-2025_02334-1
SUSE-SU-2025_02537-1

Produtos afetados

Astra Linux
Debian
Linux Kernel
Red Hat
Suse