PT-2025-8370 · Linux+2 · Linux Kernel+2

Published 2022-05-22 · Updated 2025-04-14 · CVE-2022-49436

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the powerpc/papr scm module. The leak occurs when char * elements allocated for individual stat id in papr scm priv.nvdimm events map[] are not properly freed during error paths in papr scm pmu check events(), papr scm remove(), and papr scm pmu register(). The issue arises from inconsistent assumptions about the size and termination of stat id strings. To fix this, memory allocation for papr scm priv.nvdimm events map has been modified to include space for stat id entries, reducing memory usage and indirection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Memory Leak

Weakness Enumeration

CWE-770

CWE-401

Related Identifiers

BDU:2026-04028

CVE-2022-49436

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1302

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49436.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49436 · Vendor Advisory
• https://git.kernel.org/stable/c/0e0946e22f3665d27325d389ff45ade6e93f3678 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49436 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49436 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49436 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b073096df4dec70d0436321b7093bad27ae91f9e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49436 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04028 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49436 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49436 · Security Note
• https://suse.com/security/cve/CVE-2022-49379 · Note
• https://suse.com/security/cve/CVE-2022-49467 · Note