CVE-2022-49959
published 2025-06-18CVE-2022-49959: In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
5.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix memory leak at failed datapath creation
ovs_dp_cmd_new()->ovs_dp_change()->ovs_dp_set_upcall_portids()
allocates array via kmalloc.
If for some reason new_vport() fails during ovs_dp_cmd_new()
dp->upcall_portids must be freed.
Add missing kfree.
Kmemleak example:
unreferenced object 0xffff88800c382500 (size 64):
comm "dump_state", pid 323, jiffies 4294955418 (age 104.347s)
hex dump (first 32 bytes):
5e c2 79 e4 1f 7a 38 c7 09 21 38 0c 80 88 ff ff ^.y..z8..!8.....
03 00 00 00 0a 00 00 00 14 00 00 00 28 00 00 00 ............(...
backtrace:
[] ovs_dp_set_upcall_portids+0x38/0xa0
[] ovs_dp_change+0x63/0xe0
[] ovs_dp_cmd_new+0x1f0/0x380
[] genl_family_rcv_msg_doit+0xea/0x150
[] genl_rcv_msg+0xdc/0x1e0
[] netlink_rcv_skb+0x50/0x100
[] genl_rcv+0x24/0x40
[] netlink_unicast+0x23e/0x360
[] netlink_sendmsg+0x24e/0x4b0
[] sock_sendmsg+0x62/0x70
[] ____sys_sendmsg+0x230/0x270
[] ___sys_sendmsg+0x88/0xd0
[] __sys_sendmsg+0x59/0xa0
[] do_syscall_64+0x3b/0x90
[] entry_SYSCALL_64_after_hwframe+0x63/0xcd
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= b83d23a2a38b1770da0491257ae81d52307f7816 < ca54b2bfaab385778e55a9fd33f6c31e7f743b48 | ca54b2bfaab385778e55a9fd33f6c31e7f743b48 |
| linux | linux | >= b83d23a2a38b1770da0491257ae81d52307f7816 < c0c1c0241917459644326a1a3102207c871ae159 | c0c1c0241917459644326a1a3102207c871ae159 |
| linux | linux | >= b83d23a2a38b1770da0491257ae81d52307f7816 < a87406f4adee9c53b311d8a1ba2849c69e29a6d0 | a87406f4adee9c53b311d8a1ba2849c69e29a6d0 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 4.15.0-246.258 | 4.15.0-246.258 |
| linux | linux_kernel | >= 5.15 < 5.15.66 | 5.15.66 |
| linux | linux_kernel | >= 5.16 < 5.19.8 | 5.19.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: openvswitch: fix memory leak at failed datapath creation
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-49959 [MEDIUM] CWE-401 kernel: openvswitch: fix memory leak at failed datapath creation
kernel: openvswitch: fix memory leak at failed datapath creation
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix memory leak at failed datapath creation
ovs_dp_cmd_new()->ovs_dp_change()->ovs_dp_set_upcall_portids()
allocates array via kmalloc.
If for some reason new_vport() fails during ovs_dp_cmd_new()
dp->upcall_portids must be freed.
Add missing kfree.
Kmemleak example:
unreferenced object 0xffff88800c382500 (size 64):
comm "dump_state", pid 323, jiffies 4294955418 (age 104.347s)
hex dump (first 32 bytes):
5e c2 79 e4 1f 7a 38 c7 09 21 38 0c 80 88 ff ff ^.y..z8..!8.....
03 00 00 00 0a 00 00 00 14 00 00 00 28 00 00 00 ............(...
backtrace:
[] ovs_dp_set_upcall_portids+0x38/0xa0
[] ovs_dp_change+0x63/0xe0
[] ovs_dp_cmd_new+0x1f0/0x380
[] genl_f
Debian
CVE-2022-49959: linux - In the Linux kernel, the following vulnerability has been resolved: openvswitch...
vendor_debian·2022·CVSS 5.5
CVE-2022-49959 [MEDIUM] CVE-2022-49959: linux - In the Linux kernel, the following vulnerability has been resolved: openvswitch...
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation ovs_dp_cmd_new()->ovs_dp_change()->ovs_dp_set_upcall_portids() allocates array via kmalloc. If for some reason new_vport() fails during ovs_dp_cmd_new() dp->upcall_portids must be freed. Add missing kfree. Kmemleak example: unreferenced object 0xffff88800c382500 (size 64): comm "dump_state", pid 323, jiffies 4294955418 (age 104.347s) hex dump (first 32 bytes): 5e c2 79 e4 1f 7a 38 c7 09 21 38 0c 80 88 ff ff ^.y..z8..!8..... 03 00 00 00 0a 00 00 00 14 00 00 00 28 00 00 00 ............(... backtrace: [] ovs_dp_set_upcall_portids+0x38/0xa0 [] ovs_dp_change+0x63/0xe0 [] ovs_dp_cmd_new+0x1f0/0x380 [] genl_family_rcv_msg_doit+0xea/0x150 [] genl_rcv_msg+0xdc/0x1e0 [] netlin
OSV
linux-azure, linux-azure-fips vulnerabilities
osv·2026-02-12·CVSS 5.5
CVE-2022-48986 linux-azure, linux-azure-fips vulnerabilities
linux-azure, linux-azure-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- NVME drivers;
- File systems infrastructure;
- Timer subsystem;
- Memory management;
- Packet sockets;
(CVE-2022-48986, CVE-2024-27078, CVE-2024-49959, CVE-2024-50195,
CVE-2024-56606, CVE-2024-56756, CVE-2025-39993)
OSV
linux-gcp-fips vulnerabilities
osv·2026-02-11·CVSS 5.5
CVE-2022-48986 linux-gcp-fips vulnerabilities
linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- NVME drivers;
- File systems infrastructure;
- Timer subsystem;
- Memory management;
- Packet sockets;
(CVE-2022-48986, CVE-2024-27078, CVE-2024-49959, CVE-2024-50195,
CVE-2024-56606, CVE-2024-56756, CVE-2025-39993)
OSV
linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15 vulnerabilities
osv·2026-02-05·CVSS 5.5
CVE-2022-48986 linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15 vulnerabilities
linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15 vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- NVME drivers;
- File systems infrastructure;
- Timer subsystem;
- Memory management;
- Packet sockets;
(CVE-2022-48986, CVE-2024-27078, CVE-2024-49959, CVE-2024-50195,
CVE-2024-56606, CVE-2024-56756, CVE-2025-39993)
OSV
linux, linux-aws, linux-aws-hwe, linux-hwe, linux-kvm, linux-oracle vulnerabilities
osv·2026-01-29·CVSS 5.5
CVE-2022-48986 linux, linux-aws, linux-aws-hwe, linux-hwe, linux-kvm, linux-oracle vulnerabilities
linux, linux-aws, linux-aws-hwe, linux-hwe, linux-kvm, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- NVME drivers;
- File systems infrastructure;
- Timer subsystem;
- Memory management;
- Packet sockets;
(CVE-2022-48986, CVE-2024-27078, CVE-2024-49959, CVE-2024-50195,
CVE-2024-56606, CVE-2024-56756, CVE-2025-39993)
OSV
linux-aws-fips, linux-fips vulnerabilities
osv·2026-01-29·CVSS 5.5
CVE-2022-48986 linux-aws-fips, linux-fips vulnerabilities
linux-aws-fips, linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- NVME drivers;
- File systems infrastructure;
- Timer subsystem;
- Memory management;
- Packet sockets;
(CVE-2022-48986, CVE-2024-27078, CVE-2024-49959, CVE-2024-50195,
CVE-2024-56606, CVE-2024-56756, CVE-2025-39993)
GHSA
GHSA-8gmg-4fx3-v48p: In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix memory leak at failed datapath creation
ovs_dp_cmd_new()->ovs_d
ghsa_unreviewed·2025-06-18
CVE-2022-49959 [MEDIUM] CWE-401 GHSA-8gmg-4fx3-v48p: In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix memory leak at failed datapath creation
ovs_dp_cmd_new()->ovs_d
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix memory leak at failed datapath creation
ovs_dp_cmd_new()->ovs_dp_change()->ovs_dp_set_upcall_portids()
allocates array via kmalloc.
If for some reason new_vport() fails during ovs_dp_cmd_new()
dp->upcall_portids must be freed.
Add missing kfree.
Kmemleak example:
unreferenced object 0xffff88800c382500 (size 64):
comm "dump_state", pid 323, jiffies 4294955418 (age 104.347s)
hex dump (first 32 bytes):
5e c2 79 e4 1f 7a 38 c7 09 21 38 0c 80 88 ff ff ^.y..z8..!8.....
03 00 00 00 0a 00 00 00 14 00 00 00 28 00 00 00 ............(...
backtrace:
[] ovs_dp_set_upcall_portids+0x38/0xa0
[] ovs_dp_change+0x63/0xe0
[] ovs_dp_cmd_new+0x1f0/0x380
[] genl_family_rcv_msg_doit+0xea/0x150
[] genl_rcv_msg+0xdc/0x1e0
[] net
OSV
CVE-2022-49959: In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation ovs_dp_cmd_new()->ovs_dp_
osv·2025-06-18·CVSS 5.5
CVE-2022-49959 [MEDIUM] CVE-2022-49959: In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation ovs_dp_cmd_new()->ovs_dp_
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation ovs_dp_cmd_new()->ovs_dp_change()->ovs_dp_set_upcall_portids() allocates array via kmalloc. If for some reason new_vport() fails during ovs_dp_cmd_new() dp->upcall_portids must be freed. Add missing kfree. Kmemleak example: unreferenced object 0xffff88800c382500 (size 64): comm "dump_state", pid 323, jiffies 4294955418 (age 104.347s) hex dump (first 32 bytes): 5e c2 79 e4 1f 7a 38 c7 09 21 38 0c 80 88 ff ff ^.y..z8..!8..... 03 00 00 00 0a 00 00 00 14 00 00 00 28 00 00 00 ............(... backtrace: [] ovs_dp_set_upcall_portids+0x38/0xa0 [] ovs_dp_change+0x63/0xe0 [] ovs_dp_cmd_new+0x1f0/0x380 [] genl_family_rcv_msg_doit+0xea/0x150 [] genl_rcv_msg+0xdc/0x1e0 [] netlin
No detection rules found.
No public exploits indexed.
2025-06-18
Published