PT-2025-18613 · Linux+1 · Linux Kernel+1

Published 2025-05-01 · Updated 2025-05-02 · CVE-2022-49896

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, related to the cxl/pmem subsystem. When a cxl nvdimm object is removed, its associated regions must also be disabled. However, the driver was only tracking one region at a time, leading to a situation where only the last enabled region per nvdimm device is cleaned up properly, causing other regions to be leaked and resulting in cxl memdev reference leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-06053

CVE-2022-49896

Affected Products

Astra Linux

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49896.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49896 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49896 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49896 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49896 · Vendor Advisory
• https://git.kernel.org/stable/c/f43b6bfdbab78606735ba81185cf0602b81e40b6 · Patch
• https://bdu.fstec.ru/vul/2026-06053 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49896 · Security Note
• https://git.kernel.org/stable/c/4d07ae22e79ebc2d7528bbc69daa53b86981cb3a · Patch
• https://cve.org/CVERecord?id=CVE-2022-49896 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49896 · Vendor Advisory
• https://twitter.com/CVEnew/status/1917950823365333162 · Twitter Post
• https://git.kernel.org/linus/4d07ae22e79ebc2d7528bbc69daa53b86981cb3a · Note
• https://lore.kernel.org/linux-cve-announce/2025050100-CVE-2022-49896-2593@gregkh · Note
• https://access.redhat.com/security/cve/cve-2022-49896 · Note