CVE-2022-49891
published 2025-05-01CVE-2022-49891: In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() test_gen_kprobe_cmd()…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak
when there is no failure. Move kfree(buf) from fail path to common path
to prevent the memleak. The same reason and solution in
test_gen_kretprobe_cmd().
unreferenced object 0xffff888143b14000 (size 2048):
comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s)
hex dump (first 32 bytes):
70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp
72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys
backtrace:
[] kmalloc_trace+0x27/0xa0
[] 0xffffffffa059006f
[] do_one_initcall+0x87/0x2a0
[] do_init_module+0xdf/0x320
[] load_module+0x3006/0x3390
[] __do_sys_finit_module+0x113/0x1b0
[] do_syscall_64+0x35/0x80
[] entry_SYSCALL_64_after_hwframe+0x46/0xb0
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.8-1 (bookworm) | linux 6.0.8-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 64836248dda20c8e7427b493f7e06d9bf8f58850 < bef08acbe560a926b4cee9cc46404cc98ae5703b | bef08acbe560a926b4cee9cc46404cc98ae5703b |
| linux | linux | >= 64836248dda20c8e7427b493f7e06d9bf8f58850 < d1b6a8e3414aeaa0985139180c145d2d0fbd2a49 | d1b6a8e3414aeaa0985139180c145d2d0fbd2a49 |
| linux | linux | >= 64836248dda20c8e7427b493f7e06d9bf8f58850 < 71aeb8d01a8c7ab5cf7da3f81b35206f56ce6bca | 71aeb8d01a8c7ab5cf7da3f81b35206f56ce6bca |
| linux | linux | >= 64836248dda20c8e7427b493f7e06d9bf8f58850 < 66f0919c953ef7b55e5ab94389a013da2ce80a2c | 66f0919c953ef7b55e5ab94389a013da2ce80a2c |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 5.11 < 5.15.78 | 5.15.78 |
| linux | linux_kernel | >= 5.16 < 6.0.8 | 6.0.8 |
| linux | linux_kernel | >= 5.6 < 5.10.154 | 5.10.154 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
vendor_redhat·2025-05-01·CVSS 5.5
CVE-2022-49891 [MEDIUM] kernel: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
kernel: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
In the Linux kernel, the following vulnerability has been resolved:
tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak
when there is no failure. Move kfree(buf) from fail path to common path
to prevent the memleak. The same reason and solution in
test_gen_kretprobe_cmd().
unreferenced object 0xffff888143b14000 (size 2048):
comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s)
hex dump (first 32 bytes):
70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp
72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys
backtrace:
[] kmalloc_trace+0x27/0xa0
[] 0xffffffffa059006f
[] do_one_initcall+0x87/0x2a0
[] do
Debian
CVE-2022-49891: linux - In the Linux kernel, the following vulnerability has been resolved: tracing: kp...
vendor_debian·2022·CVSS 5.5
CVE-2022-49891 [MEDIUM] CVE-2022-49891: linux - In the Linux kernel, the following vulnerability has been resolved: tracing: kp...
In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak when there is no failure. Move kfree(buf) from fail path to common path to prevent the memleak. The same reason and solution in test_gen_kretprobe_cmd(). unreferenced object 0xffff888143b14000 (size 2048): comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s) hex dump (first 32 bytes): 70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp 72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys backtrace: [] kmalloc_trace+0x27/0xa0 [] 0xffffffffa059006f [] do_one_initcall+0x87/0x2a0 [] do_init_module+0xdf/0x320 [] load_module+0x3006/0x3390 [] __do_sys_finit_module
GHSA
GHSA-4g9q-6gcq-f3vx: In the Linux kernel, the following vulnerability has been resolved:
tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
test_gen_kpr
ghsa_unreviewed·2025-05-01
CVE-2022-49891 [MEDIUM] CWE-401 GHSA-4g9q-6gcq-f3vx: In the Linux kernel, the following vulnerability has been resolved:
tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
test_gen_kpr
In the Linux kernel, the following vulnerability has been resolved:
tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak
when there is no failure. Move kfree(buf) from fail path to common path
to prevent the memleak. The same reason and solution in
test_gen_kretprobe_cmd().
unreferenced object 0xffff888143b14000 (size 2048):
comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s)
hex dump (first 32 bytes):
70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp
72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys
backtrace:
[] kmalloc_trace+0x27/0xa0
[] 0xffffffffa059006f
[] do_one_initcall+0x87/0x2a0
[] do_init_module+0xdf/0x320
[] load_module+0x3006/0x3390
[] __do_sys_finit_mod
OSV
CVE-2022-49891: In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() test_gen_kprob
osv·2025-05-01·CVSS 5.5
CVE-2022-49891 [MEDIUM] CVE-2022-49891: In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() test_gen_kprob
In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak when there is no failure. Move kfree(buf) from fail path to common path to prevent the memleak. The same reason and solution in test_gen_kretprobe_cmd(). unreferenced object 0xffff888143b14000 (size 2048): comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s) hex dump (first 32 bytes): 70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp 72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys backtrace: [] kmalloc_trace+0x27/0xa0 [] 0xffffffffa059006f [] do_one_initcall+0x87/0x2a0 [] do_init_module+0xdf/0x320 [] load_module+0x3006/0x3390 [] __do_sys_finit_module
No detection rules found.
No public exploits indexed.
2025-05-01
Published