PT-2025-18533 · Linux · Linux Kernel

Published 2025-05-01 · Updated 2025-05-01 · CVE-2022-49816

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the register pcpu() function. The issue arises when dev set name() is called in device add() and returns an error, but the allocated name is not properly freed. To address this, put device() is called to release the reference, allowing the name to be freed in kobject cleanup().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-49816

Affected Products

Linux Kernel

References · 12

• https://osv.dev/vulnerability/CVE-2022-49816 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49816 · Security Note
• https://git.kernel.org/stable/c/c08c13cb13fa3866dd0700db3b246fcd2043ab81 · Note
• https://git.kernel.org/stable/c/0199bf0a8f74509736744c9e36f4473a5892a09d · Note
• https://git.kernel.org/stable/c/bb9924a6edd9d4a9ef83a5f337af60f8a7a68f98 · Note
• https://git.kernel.org/stable/c/da36a2a76b01b210ffaa55cdc2c99bc8783697c5 · Note
• https://git.kernel.org/stable/c/e948f3c129d78537ded70bcc99c31f0b45f05dd7 · Note
• https://git.kernel.org/stable/c/ccb22c876e8e7f62377e749c971907efe65d34c2 · Note
• https://twitter.com/CVEnew/status/1918014616434598360 · Twitter Post
• https://git.kernel.org/stable/c/6209a85079a035b5c2279b15b197531156b549fa · Note
• https://git.kernel.org/stable/c/7ed540bcee2e24479524b9705cc7462b2652f944 · Note