PT-2025-18503 · Linux+2 · Linux Kernel+2

Published 2022-11-14 · Updated 2025-06-30 · CVE-2022-49786

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the blk-cgroup, where the function blkcg css online is supposed to pin the blkcg of the parent. However, due to a refactoring change, it was modified to pin the css instead, resulting in extra pins and leading to leaks of blkcgs and cgroups.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-05942

CVE-2022-49786

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 423

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49786.json · Exploit
• https://bdu.fstec.ru/vul/2026-05942 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49786 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49786 · Vendor Advisory
• https://git.kernel.org/stable/c/d7dbd43f4a828fa1d9a8614d5b0ac40aee6375fe · Patch
• https://ubuntu.com/security/CVE-2022-49786 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49786 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49786 · Security Note
• https://git.kernel.org/stable/c/d118247e404d6338f7b90636a3c6b95a387ed163 · Patch
• https://osv.dev/vulnerability/CVE-2022-49786 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49786 · Vendor Advisory
• https://bugzilla.suse.com/1242550 · Note
• https://bugzilla.suse.com/1208542 · Note