PT-2025-18598 · Linux+2 · Linux Kernel+2

Published

2025-05-01

·

Updated

2025-07-16

·

CVE-2022-49881

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak issue has been identified in the Linux kernel, specifically in the cfg80211 module. The problem occurs in the query regdb file() function, where the alpha2 parameter is duplicated using kmemdup() and then freed in regdb fw cb(). However, if request firmware nowait() fails, it may not call regdb fw cb(), resulting in a memory leak.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-05845
CVE-2022-49881
OESA-2025-1820
SUSE-SU-2025:01918-1
SUSE-SU-2025:01966-1
SUSE-SU-2025:01982-1
SUSE-SU-2025:01995-1
SUSE-SU-2025:02173-1
SUSE-SU-2025:02262-1
SUSE-SU-2025:02334-1
SUSE-SU-2025:2173-1
SUSE-SU-2025_01982-1
SUSE-SU-2025_02173-1
SUSE-SU-2025_02262-1
SUSE-SU-2025_02334-1

Affected Products

Astra Linux
Linux Kernel
Suse