PT-2025-25920 · Linux+2 · Linux Kernel+2

Published 2022-08-28 · Updated 2025-06-19 · CVE-2022-49994

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the bootmem and kmemleak components. Specifically, the vmemmap pages are marked by kmemleak when allocated from memblock, but not removed when the page is freed. This can cause kmemleak to report errors and stop working when the page is reused. The error message includes details such as the object's size, comm, pid, jiffies, min count, count, flags, checksum, and backtrace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Improper Resource Release

Weakness Enumeration

CWE-401

CWE-404

Related Identifiers

BDU:2026-04562

CVE-2022-49994

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Astra Linux

Linux Kernel

Red Hat

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49994.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49994 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49994 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49994 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49994 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49994 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49994 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04562 · Security Note
• https://git.kernel.org/stable/c/dd0ff4d12dd284c334f7e9b07f8f335af856ac78 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49994 · Security Note
• https://git.kernel.org/stable/c/9ae15c4ba2be1e5a62503b6d873e84beb5fcbb5a · Patch
• https://git.kernel.org/stable/c/16a12ee619e39e8112f61b603255c16b73b6264b · Patch
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6 · Note
• https://access.redhat.com/security/cve/CVE-2022-49994 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note