PT-2025-8586 · Linux+4 · Linux Kernel+4

Yi Zhang · Published 2023-05-16 · Updated 2025-04-14 · CVE-2022-49653

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was found in the Linux kernel's i2c piix4 driver, specifically in the EFCH MMIO support code. The leak occurred because release resource() only removes the resource from the tree without freeing its memory, whereas release mem region() is required to free the memory. This issue was introduced by the recently added support for EFCH MMIO regions.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the memory leak in the i2c piix4 driver. As a temporary workaround, consider applying the patch that replaces release resource() with release mem region() in the affected code path.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CESA-2023_2951

CVE-2022-49653

RHSA-2023:2951

RHSA-2023:6583

RHSA-2023_2951

RHSA-2023_6583

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1328

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49653.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49653 · Security Note
• https://git.kernel.org/stable/c/a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49653 · Vendor Advisory
• https://git.kernel.org/stable/c/d2bf1a6480e8d44658a8ac3bdcec081238873212 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49653 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49653 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49653 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49653 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49653 · Vendor Advisory
• https://git.kernel.org/stable/c/8ad59b397f86a4d8014966fdc0552095a0c4fb2b · Patch