PT-2025-18570 · Linux+4 · Linux Kernel+4

Published 2023-05-09 · Updated 2025-07-10 · CVE-2022-49853

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the macvlan common newlink function. The kmemleak tool reports memory leaks when the macvlan mode is configured as 'source' and the register netdevice function returns an error. This occurs because the resource generated by macvlan changelink sources is not cleaned up in the event of an error. The issue is resolved by executing macvlan flush sources to ensure resource cleanup in case of an error.

Recommendations To resolve the issue, apply the provided patch to ensure that macvlan flush sources is executed in case of an error, thereby preventing memory leaks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CESA-2023_4517

CESA-2023_7077

CVE-2022-49853

RHSA-2023:2458

RHSA-2023:4517

RHSA-2023:7077

RHSA-2023_2458

RHSA-2023_4517

RHSA-2023_7077

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 654

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49853.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49853 · Security Note
• https://git.kernel.org/stable/c/21d3a8b6a1e39e7529ce9de07316ee13a63f305b · Patch
• https://osv.dev/vulnerability/CVE-2022-49853 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49853 · Vendor Advisory
• https://git.kernel.org/stable/c/685e73e3f7a9fb75cbf049a9d0b7c45cc6b57b2e · Patch
• https://git.kernel.org/stable/c/956e0216a19994443c90ba2ea6b0b284c9c4f9cb · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a8d67367ab33604326cc37ab44fd1801bf5691ba · Patch
• https://git.kernel.org/stable/c/23569b5652ee8e8e55a12f7835f59af6f3cefc30 · Patch
• https://git.kernel.org/stable/c/9ea003c4671b2fc455320ecf6d4a43b0a3c1878a · Patch
• https://ubuntu.com/security/CVE-2022-49853 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01918-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory