PT-2025-8662 · Linux+2 · Linux Kernel+2

Xiaohui Zhang · Published 2022-06-08 · Updated 2025-06-17 · CVE-2022-49729

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the nfcmrvl module. The problem arises from the handling of deferred transmission urbs, where usb submit urb is called directly, causing usb giveback urb bh to fail in unreferring the urb in usb unanchor urb. This results in a memory leak. The issue is similar to a previously fixed memory leak in the Bluetooth module.

Recommendations To resolve the issue, put the deferred transmission urbs in tx anchor to avoid the memory leak, and also fix the error handling.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-02629

CVE-2022-49729

OESA-2025-1317

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1678

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49729.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49581 · Security Note
• https://git.kernel.org/stable/c/3eadc560c1919b8193d17334145dad9a917960e4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49608 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49155 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49315 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49532 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6b4d8b44e7163a77fe942f5b80e1651c1b78c537 · Patch
• https://git.kernel.org/stable/c/0eeec1a8b0cd38c47edeb042980a6aeacecf35ed · Patch
• https://git.kernel.org/stable/c/6616872cfe7f0474a22dd1f12699f95bcf81a54d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49725 · Security Note
• https://git.kernel.org/stable/c/f21f908347712b8288ffe83b531b5e977042b29c · Patch
• https://git.kernel.org/stable/c/3e7c7df6991ac349f2fa8540047757df666e610f · Patch