CVE-2022-49801

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49801

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in tracing_read_pipe() kmemleak reports this issue: unreferenced object 0xffff888105a18900 (size 128): comm "test_progs", pid 18933, jiffies 4336275356 (age 22801.766s) hex dump (first 32 bytes): 25 73 00 90 81 88 ff ff 26 05 00 00 42 01 58 04 %s......&...B.X. 03 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000560143a1>] __kmalloc_node_track_caller+0x4a/0x140 [<000000006af00822>] krealloc+0x8d/0xf0 [<00000000c309be6a>] trace_iter_expand_format+0x99/0x150 [<000000005a53bdb6>] trace_check_vprintf+0x1e0/0x11d0 [<0000000065629d9d>] trace_event_printf+0xb6/0xf0 [<000000009a690dc7>] trace_raw_output_bpf_trace_printk+0x89/0xc0 [<00000000d22db172>] print_trace_line+0x73c/0x1480 [<00000000cdba76ba>] tracing_read_pipe+0x45c/0x9f0 [<0000000015b58459>] vfs_read+0x17b/0x7c0 [<000000004aeee8ed>] ksys_read+0xed/0x1c0 [<0000000063d3d898>] do_syscall_64+0x3b/0x90 [<00000000a06dda7f>] entry_SYSCALL_64_after_hwframe+0x63/0xcd iter->fmt alloced in tracing_read_pipe() -> .. ->trace_iter_expand_format(), but not freed, to fix, add free in tracing_release_pipe()

References
Link Resource
https://git.kernel.org/stable/c/2c21ee020ce43d744ecd7f3e9bddfcaafef270ce Patch
https://git.kernel.org/stable/c/649e72070cbbb8600eb823833e4748f5a0815116 Patch
https://git.kernel.org/stable/c/a7d3f8f33c113478737bc61bb32ec5f9a987da7d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
History

07 Nov 2025, 19:34

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2c21ee020ce43d744ecd7f3e9bddfcaafef270ce - () https://git.kernel.org/stable/c/2c21ee020ce43d744ecd7f3e9bddfcaafef270ce - Patch
References () https://git.kernel.org/stable/c/649e72070cbbb8600eb823833e4748f5a0815116 - () https://git.kernel.org/stable/c/649e72070cbbb8600eb823833e4748f5a0815116 - Patch
References () https://git.kernel.org/stable/c/a7d3f8f33c113478737bc61bb32ec5f9a987da7d - () https://git.kernel.org/stable/c/a7d3f8f33c113478737bc61bb32ec5f9a987da7d - Patch
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux

02 May 2025, 13:53

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tracing: Fix memory leakage in tracing_read_pipe() kmemleak informa de este problema: unreferenced object 0xffff888105a18900 (size 128): comm "test_progs", pid 18933, jiffies 4336275356 (age 22801.766s) hex dump (first 32 bytes): 25 73 00 90 81 88 ff ff 26 05 00 00 42 01 58 04 %s......&amp;...BX 03 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [&lt;00000000560143a1&gt;] __kmalloc_nodo_rastreador_llamador+0x4a/0x140 [&lt;000000006af00822&gt;] krealloc+0x8d/0xf0 [&lt;00000000c309be6a&gt;] trace_iter_expand_format+0x99/0x150 [&lt;000000005a53bdb6&gt;] trace_check_vprintf+0x1e0/0x11d0 [&lt;0000000065629d9d&gt;] trace_event_printf+0xb6/0xf0 [&lt;000000009a690dc7&gt;] trace_raw_output_bpf_trace_printk+0x89/0xc0 [&lt;00000000d22db172&gt;] imprimir_línea_de_seguimiento+0x73c/0x1480 [&lt;00000000cdba76ba&gt;] conducto_de_lectura_de_seguimiento+0x45c/0x9f0 [&lt;0000000015b58459&gt;] lectura_vfs+0x17b/0x7c0 [&lt;000000004aeee8ed&gt;] lectura_ksys+0xed/0x1c0 [&lt;0000000063d3d898&gt;] hacer_llamada_al_sistema_64+0x3b/0x90 [&lt;00000000a06dda7f&gt;] entrada_SYSCALL_64_después_de_hwframe+0x63/0xcd iter-&gt;fmt asignado en conducto_de_lectura_de_seguimiento() -&gt; .. -&gt;trace_iter_expand_format(), pero no se libera, para solucionarlo, agregue free en tracing_release_pipe()

01 May 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 15:16

Updated : 2025-11-07 19:34

NVD link : CVE-2022-49801

Mitre link : CVE-2022-49801

CVE.ORG link : CVE-2022-49801

JSON object : View

Products Affected

linux

CWE
CWE-401

Missing Release of Memory after Effective Lifetime