PT-2025-8403 · Linux+1 · Linux Kernel+1

Omar Sandoval · Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49469

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified, specifically in the btrfs module. The problem occurs when certain functions, such as btrfs qgroup inherit(), btrfs alloc tree block, or btrfs insert root(), fail during the execution of create subvol(). This failure leads to a memory leak because anon dev is not properly freed. The error handling in create subvol() has been reorganized to address this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-68681

BDU:2026-02661

CVE-2022-49469

Affected Products

Debian

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49469.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49469 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49469 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49469 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49469 · Vendor Advisory
• https://git.kernel.org/stable/c/7a875ad8706f0903a0e812e0dd701956ee9826ff · Patch
• https://git.kernel.org/stable/c/2256e901f5bddc56e24089c96f27b77da932dfcc · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49469 · Vendor Advisory
• https://git.kernel.org/stable/c/d887b3de318834f9aa637ecf79c6bc66cba7c69a · Patch
• https://osv.dev/vulnerability/AZL-68681 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49469 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49469 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02661 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49469 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49469 · Security Note