PT-2025-18610 · Linux+1 · Linux Kernel+1

Published 2025-05-01 · Updated 2025-05-02 · CVE-2022-49893

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, specifically in the cxl/region component. The problem occurred when a region was deleted, and previously assigned targets still held references to it. To address this, the code now detaches all targets during the execution of the unregister region() function to prevent references from being left behind. If this was not done, the region object would leak because userspace would lose the ability to detach targets once the region's sysfs is torn down.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-06055

CVE-2022-49893

Affected Products

Astra Linux

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49893.json · Exploit
• https://bdu.fstec.ru/vul/2026-06055 · Security Note
• https://git.kernel.org/stable/c/0d9e734018d70cecf79e2e4c6082167160a0f13f · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49893 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49893 · Security Note
• https://git.kernel.org/stable/c/45d9fb4b758b9d602ee7776eb6754b0349946aad · Patch
• https://ubuntu.com/security/CVE-2022-49893 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49893 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49893 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49893 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49893 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2025050158-CVE-2022-49893-209a@gregkh · Note
• https://access.redhat.com/security/cve/cve-2022-49893 · Note
• https://git.kernel.org/linus/0d9e734018d70cecf79e2e4c6082167160a0f13f · Note
• https://twitter.com/CVEnew/status/1917950826670420060 · Twitter Post