PT-2025-8630 · Linux+4 · Linux Kernel+4

Published 2022-06-15 · Updated 2025-04-14 · CVE-2022-49697

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A request socket leak was found in the Linux kernel, specifically in the BPF program when doing a socket lookup. This leak occurred because the BPF program was returning the parent LISTEN socket without decrementing the child request socket, resulting in a request sock slab object leak. The issue was reported by a customer in a Calico cloud environment and was diagnosed and tested with the help of Curtis Taylor. The leak was fixed by decrementing the child request socket if one is present before returning the full socks to the caller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

NULL Pointer Dereference

Weakness Enumeration

CWE-401

CWE-911

CWE-476

Related Identifiers

BDU:2026-03996

BDU:2026-03997

CESA-2022_7683

CVE-2022-49697

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1315

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49697.json · Exploit
• https://bdu.fstec.ru/vul/2026-03996 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49699 · Security Note
• https://git.kernel.org/stable/c/5a62b5ba4c0ce8315b6382cd4ace81b48cd121cd · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49697 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/8ffe2e50e9678c8373027492035f094b130437f1 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49697 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49697 · Vendor Advisory
• https://git.kernel.org/stable/c/b03607437ea81b850599f705096b05b85e7a4a71 · Patch
• https://bdu.fstec.ru/vul/2026-03997 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49697 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49697 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49697 · Vendor Advisory