PT-2025-18618 · Linux+3 · Linux Kernel+3

Published 2022-10-31 · Updated 2026-04-20 · CVE-2022-49901

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the blk-mq module. The leak occurs when the blk mq init allocated queue function is called, and the q->ma ops is set to NULL before blk release queue is called. This results in a kmemleak, causing unreferenced objects to remain in memory. The issue is caused by the failure of blk mq alloc and init hctx when i is not equal to 0, leading to the allocation of hctxs that are not properly cleaned up. The estimated number of potentially affected devices worldwide is not available.

Technical details about exploitation include:

• The blk mq init allocated queue function is vulnerable.
• The q->ma ops variable is set to NULL before blk release queue is called.
• The blk mq alloc and init hctx function fails when i is not equal to 0.
• The hctxs allocated by blk mq alloc and init hctx are moved to q->unused hctx list and are not properly cleaned up.

Recommendations To resolve the issue, call blk release queue in the exception path. This will ensure that the hctxs in q->unused hctx list are properly cleaned up, preventing the memory leak. As a temporary workaround, consider disabling the blk mq init allocated queue function until a patch is available. Restrict access to the vulnerable blk-mq module to minimize the risk of exploitation. Avoid using the q->ma ops variable in the affected code path until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-61715

BDU:2026-05782

CVE-2022-49901

OESA-2025-1514

OESA-2025-1515

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 434

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49901.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49901 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49901 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1514 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://git.kernel.org/stable/c/2dc97e15a54b7bdf457848aa8c663c98a24e58a6 · Patch
• https://osv.dev/vulnerability/OESA-2025-1515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23144 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49901 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49901 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05782 · Security Note
• https://osv.dev/vulnerability/AZL-61715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21999 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49901 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49901 · Security Note