PT-2025-18607 · Linux+4 · Linux Kernel+4

Published 2023-11-14 · Updated 2025-07-10 · CVE-2022-49890

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the capabilities module. The problem occurs when the vfs getxattr alloc() function fails to allocate memory for the tmpbuf variable, but the handler->get() function is not called, resulting in a memory leak. This issue arises in the cap inode getsecurity() function when it attempts to complete the memory allocation of tmpbuf using vfs getxattr alloc(). To fix this, the code will attempt to free the tmpbuf memory after vfs getxattr alloc() fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CESA-2023_7077

CVE-2022-49890

RHSA-2023:7077

RHSA-2023_7077

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 448

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49890.json · Exploit
• https://ubuntu.com/security/CVE-2022-49890 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49890 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49890 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://git.kernel.org/stable/c/90577bcc01c4188416a47269f8433f70502abe98 · Patch
• https://git.kernel.org/stable/c/8cf0a1bc12870d148ae830a4ba88cfdf0e879cee · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49890 · Vendor Advisory
• https://git.kernel.org/stable/c/6bb00eb21c0fbf18e5d3538c9ff0cf63fd0ace85 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01918-1 · Vendor Advisory
• https://git.kernel.org/stable/c/2de8eec8afb75792440b8900a01d52b8f6742fd1 · Patch
• https://git.kernel.org/stable/c/0c3e6288da650d1ec911a259c77bc2d88e498603 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49890 · Vendor Advisory
• https://git.kernel.org/stable/c/7480aeff0093d8c54377553ec6b31110bea37b4d · Patch