PT-2025-8552 · Linux+2 · Linux Kernel+2

Jianglei Nie · Published 2025-02-26 · Updated 2025-04-16 · CVE-2022-49619

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the sfp probe() function. This function allocates memory using sfp alloc(), but when devm add action() fails, the allocated memory is not freed, resulting in a memory leak. The issue can be resolved by using devm add action or reset() instead of devm add action().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2022-49619

OESA-2025-1370

SUSE-SU-2025:1293-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 517

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49619.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49619 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49478 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49095 · Security Note
• https://git.kernel.org/stable/c/67dc32542a1fb7790d0853cf4a5cf859ac6a2002 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49619 · Vendor Advisory
• https://git.kernel.org/stable/c/f22ddc8a5278d7fb6369a0aeb0d8775a0aefaaee · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53005 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53007 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49407 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49337 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1370 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21785 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49416 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49397 · Security Note