PT-2024-11863 · Linux+4 · Linux Kernel+4

Xiongfeng Wang · Published 2022-12-01 · Updated 2025-09-29 · CVE-2022-49000

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak in the Linux kernel has been identified and resolved. The issue occurs in the has external pci() function, where a pci dev put() call is missing, leading to a reference count leak when the for each pci dev() loop is broken with pdev not NULL. The for each pci dev() function is implemented by pci get device(), which increases the reference count for the returned pci dev and decreases the reference count for the input pci dev @from if it is not NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_16880

ALT-PU-2023-1066

BDU:2025-14270

CVE-2022-49000

OPENSUSE-SU-2024_3983-1

OPENSUSE-SU-2024_3985-1

OPENSUSE-SU-2024_4131-1

SUSE-SU-2024:3983-1

SUSE-SU-2024:3985-1

SUSE-SU-2024:4082-1

SUSE-SU-2024:4100-1

SUSE-SU-2024:4131-1

SUSE-SU-2024:4364-1

SUSE-SU-2025:0034-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Red Os

Suse

References · 1026

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49000.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49000 · Vendor Advisory
• https://git.kernel.org/stable/c/17f67414718e6aba123335a33b7d15aa594fff34 · Patch
• https://git.kernel.org/stable/c/10ed7655a17f6a3eaecd1293830488259ccd5723 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:3985-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4364-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49000 · Vendor Advisory
• https://git.kernel.org/stable/c/b6eea8b2e858a20ad58ac62dc2de90fea2413f94 · Patch
• https://osv.dev/vulnerability/CVE-2022-49000 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4100-1 · Vendor Advisory
• https://git.kernel.org/stable/c/afca9e19cc720bfafc75dc5ce429c185ca93f31d · Patch
• https://bdu.fstec.ru/vul/2025-14270 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49000 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49000 · Security Note