PT-2025-8581 · Linux+5 · Linux Kernel+5

Publicado

2025-02-26

·

Atualizado

2025-11-12

·

CVE-2022-49648

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak problem has been identified in the Linux kernel, specifically in the tracing/histograms component. The issue arises when there is a problem allocating memory for var defs.expr, causing the earlier var defs.name to be freed, but not the N-th var defs.name. This results in a memory leak. The problem can be triggered by injecting a fault at the allocation of the N-th var defs.expr and then executing a specific command on the shell, which causes kmemleak to report an unreferenced object.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALSA-2025:20518
CVE-2022-49648
INFSA-2025_20518
OESA-2025-1282
OPENSUSE-SU-2025_1263-1
RHSA-2025:20518
RHSA-2025_20518
SUSE-SU-2025:1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1194-1
SUSE-SU-2025:1241-1
SUSE-SU-2025:1263-1
SUSE-SU-2025_1027-1
SUSE-SU-2025_1241-1
SUSE-SU-2025_1263-1

Produtos afetados

Almalinux
Astra Linux
Linux Kernel
Red Hat
Rocky Linux
Suse