PT-2025-8014 · Linux+5 · Linux Kernel+5

Stéphane Graber · Published 2022-04-04 · Updated 2025-09-29 · CVE-2022-49086

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel's openvswitch module. The problem occurs when parsing user-provided actions, as the module may dynamically allocate memory and store pointers in the internal copy of the actions without properly freeing them. This can lead to significant memory leaks, particularly under conditions with a high rate of flow rotation. The issue is difficult to mitigate due to the user's lack of direct control over the datapath flows generated by OVS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_16880

BDU:2025-06065

CESA-2022_7683

CVE-2022-49086

OESA-2025-1465

RHSA-2022:5626

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022:8973

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:01600-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 1496

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49086.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53032 · Security Note
• https://git.kernel.org/stable/c/7438dc55c0709819b813f4778aec2c48b782990b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52935 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21764 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49385 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49086 · Vendor Advisory
• https://git.kernel.org/stable/c/ef6f9ce0a79aa23b10fc5f3b3cab3814a25aac40 · Patch
• https://git.kernel.org/stable/c/1f30fb9166d4f15a1aa19449b9da871fe0ed4796 · Patch
• https://git.kernel.org/stable/c/3554c214b83ec9a839ed574263a34218f372990c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21761 · Security Note
• https://git.kernel.org/stable/c/837b96d8103938e35e7d92cd9db96af914ca4fff · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-58094 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory