PT-2025-25885 · Linux+3 · Linux Kernel+3

Published 2022-08-26 · Updated 2025-06-19 · CVE-2022-49959

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the openvswitch component. The issue occurs when the ovs dp cmd new() function fails during datapath creation, causing a memory leak due to a missing kfree call for the dp->upcall portids array. This issue can be exploited, potentially leading to system instability or other security concerns. The estimated number of potentially affected devices worldwide is not available.

Recommendations To resolve this issue, apply the patch that adds the missing kfree call in the ovs dp set upcall portids() function. As a temporary workaround, consider disabling the ovs dp cmd new() function until a patch is available. Restrict access to the vulnerable openvswitch module to minimize the risk of exploitation. Avoid using the dp->upcall portids array in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Improper Resource Release

Weakness Enumeration

CWE-401

CWE-404

Related Identifiers

BDU:2026-02023

CESA-2023_2951

CVE-2022-49959

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49959.json · Exploit
• https://git.kernel.org/stable/c/a87406f4adee9c53b311d8a1ba2849c69e29a6d0 · Patch
• https://osv.dev/vulnerability/CVE-2022-49959 · Vendor Advisory
• https://git.kernel.org/stable/c/c0c1c0241917459644326a1a3102207c871ae159 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49959 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49959 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49959 · Vendor Advisory
• https://git.kernel.org/stable/c/ca54b2bfaab385778e55a9fd33f6c31e7f743b48 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49959 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49959 · Security Note
• https://ubuntu.com/security/CVE-2022-49959 · Vendor Advisory
• https://twitter.com/CVEnew/status/1935727372017287679 · Twitter Post
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.8 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note