cbcvebase.
CVE-2022-49800
published 2025-05-01

CVE-2022-49800: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.7th percentile
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() test_gen_synth_cmd() only free buf in fail path, hence buf will leak when there is no failure. Add kfree(buf) to prevent the memleak. The same reason and solution in test_empty_synth_event(). unreferenced object 0xffff8881127de000 (size 2048): comm "modprobe", pid 247, jiffies 4294972316 (age 78.756s) hex dump (first 32 bytes): 20 67 65 6e 5f 73 79 6e 74 68 5f 74 65 73 74 20 gen_synth_test 20 70 69 64 5f 74 20 6e 65 78 74 5f 70 69 64 5f pid_t next_pid_ backtrace: [] kmalloc_trace+0x26/0x100 [] 0xffffffffa00083cd [] 0xffffffffa00086ba [] do_one_initcall+0xdb/0x480 [] do_init_module+0x1cf/0x680 [] load_module+0x6a50/0x70a0 [] __do_sys_finit_module+0x12f/0x1c0 [] do_syscall_64+0x3f/0x90 [] entry_SYSCALL_64_after_hwframe+0x63/0xcd unreferenced object 0xffff8881127df000 (size 2048): comm "modprobe", pid 247, jiffies 4294972324 (age 78.728s) hex dump (first 32 bytes): 20 65 6d 70 74 79 5f 73 79 6e 74 68 5f 74 65 73 empty_synth_tes 74 20 20 70 69 64 5f 74 20 6e 65 78 74 5f 70 69 t pid_t next_pi backtrace: [] kmalloc_trace+0x26/0x100 [] 0xffffffffa0008071 [] 0xffffffffa00086ce [] do_one_initcall+0xdb/0x480 [] do_init_module+0x1cf/0x680 [] load_module+0x6a50/0x70a0 [] __do_sys_finit_module+0x12f/0x1c0 [] do_syscall_64+0x3f/0x90 [] entry_SYSCALL_64_after_hwframe+0x63/0xcd

Affected

14 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.0.10-1 (bookworm)linux 6.0.10-1 (bookworm)
linuxlinux
linuxlinux>= 9fe41efaca08416657efa8731c0d47ccb6a3f3eb < 65ba7e7c241122ef0a9e61d1920f2ae9689aa79665ba7e7c241122ef0a9e61d1920f2ae9689aa796
linuxlinux>= 9fe41efaca08416657efa8731c0d47ccb6a3f3eb < 07ba4f0603aba288580866394f2916dfe55823a207ba4f0603aba288580866394f2916dfe55823a2
linuxlinux>= 9fe41efaca08416657efa8731c0d47ccb6a3f3eb < 0e5baaa181a052d968701bb9c5b1d55847f009420e5baaa181a052d968701bb9c5b1d55847f00942
linuxlinux>= 9fe41efaca08416657efa8731c0d47ccb6a3f3eb < a4527fef9afe5c903c718d0cd24609fe9c754250a4527fef9afe5c903c718d0cd24609fe9c754250
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.158-15.10.158-1
linuxlinux_kernel>= 0 < 6.0.10-16.0.10-1
linuxlinux_kernel>= 0 < 6.0.10-16.0.10-1
linuxlinux_kernel>= 0 < 6.0.10-16.0.10-1
linuxlinux_kernel>= 5.11 < 5.15.805.15.80
linuxlinux_kernel>= 5.16 < 6.0.106.0.10
linuxlinux_kernel>= 5.6 < 5.10.1565.10.156

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.