PT-2025-25908 · Linux+2 · Linux Kernel+2

Published 2022-06-20 · Updated 2025-07-28 · CVE-2022-49982

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the pvrusb2 media module. The error handling code in pvr2 hdw create fails to unregister the v4l2 device, leading to a memory leak when pvr2 hdw create returns to pvr2 context create and calls pvr2 context destroy to destroy the context. This issue arises because mp->hdw is NULL, causing pvr2 hdw destroy to return directly without properly handling the resource. The fix involves adding v4l2 device unregister to decrease the refcount of the USB interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-02361

CVE-2022-49982

OESA-2025-1726

RHSA-2023:2458

RHSA-2023:2951

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 616

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49982.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53062 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49982 · Security Note
• https://git.kernel.org/stable/c/2fe46195d2f0d5d09ea65433aefe47a4d0d0ff4d · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49982 · Vendor Advisory
• https://git.kernel.org/stable/c/ba7dd8a9686a61a34b3a7b922ce721378d4740d0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50222 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49982 · Vendor Advisory
• https://git.kernel.org/stable/c/f2f6e67522916f53ad8ccd4dbe68dcf76e9776e5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49981 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53125 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://git.kernel.org/stable/c/491762b3250fb06a0c97b5198656ea48359eaeed · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53066 · Security Note
• https://git.kernel.org/stable/c/c02d2a91a85c4c4d05826cd1ea74a9b8d42e4280 · Patch