PT-2025-18552 · Linux+2 · Linux Kernel+2

Published 2022-11-10 · Updated 2025-07-10 · CVE-2022-49835

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential memory leak issue has been resolved in the Linux kernel, specifically in the ALSA hda component. The problem occurred in the add widget node function, where kobject add may allocate memory for kobject->name when it returns an error. If the call to kobject add failed, the kobject was not freed, leading to a memory leak. To fix this, kobject put is called to recycle resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-02637

CVE-2022-49835

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:01982-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:01995-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_01982-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 757

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49835.json · Exploit
• https://git.kernel.org/stable/c/b688a3ec235222d9a84e43a48a6f31acb95baf2d · Patch
• https://bdu.fstec.ru/vul/2026-02637 · Security Note
• https://ubuntu.com/security/CVE-2022-49835 · Vendor Advisory
• https://git.kernel.org/stable/c/3a79f9568de08657fcdbc41d6fc4c0ca145a7a2b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49835 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49835 · Security Note
• https://git.kernel.org/stable/c/90b7d055e2b5f39429f9a9e3815b48a48530ef28 · Patch
• https://git.kernel.org/stable/c/bb0ac8d5e541224f599bc8e8f31a313faa4bf7b7 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49835 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01982-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49835 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49835 · Security Note