PT-2025-8560 · Linux+5 · Linux Kernel+5

Jianglei Nie · Published 2025-02-26 · Updated 2025-11-12 · CVE-2022-49627

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential memory leak in the ima init crypto() function has been identified. When the allocation of the SHA1 tfm fails, IMA fails to initialize and exits without freeing the ima algo array, leading to a memory leak. The issue is resolved by adding a missing kfree() for ima algo array.

Recommendations For the affected Linux kernel versions, consider applying the patch that adds the missing kfree() for ima algo array to avoid the potential memory leak. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025:20518

CVE-2022-49627

INFSA-2025_20518

OPENSUSE-SU-2025_1263-1

RHSA-2025:20518

RHSA-2025_20518

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Almalinux

Astra Linux

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 1569

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49627.json · Exploit
• https://git.kernel.org/stable/c/c1d9702ceb4a091da6bee380627596d1fba09274 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49627 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49627 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49627 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49627 · Security Note
• https://git.kernel.org/stable/c/067d2521874135267e681c19d42761c601d503d6 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49627 · Vendor Advisory
• https://git.kernel.org/stable/c/601ae26aa2802a4c10c94d7388a99eabdbefab2b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49627 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://git.kernel.org/stable/c/830de9667b3ada0a75a3f098dfc7159709fe397b · Patch