CVE-2022-49800
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2025
Last modified:
07/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()<br />
<br />
test_gen_synth_cmd() only free buf in fail path, hence buf will leak<br />
when there is no failure. Add kfree(buf) to prevent the memleak. The<br />
same reason and solution in test_empty_synth_event().<br />
<br />
unreferenced object 0xffff8881127de000 (size 2048):<br />
comm "modprobe", pid 247, jiffies 4294972316 (age 78.756s)<br />
hex dump (first 32 bytes):<br />
20 67 65 6e 5f 73 79 6e 74 68 5f 74 65 73 74 20 gen_synth_test<br />
20 70 69 64 5f 74 20 6e 65 78 74 5f 70 69 64 5f pid_t next_pid_<br />
backtrace:<br />
[] kmalloc_trace+0x26/0x100<br />
[] 0xffffffffa00083cd<br />
[] 0xffffffffa00086ba<br />
[] do_one_initcall+0xdb/0x480<br />
[] do_init_module+0x1cf/0x680<br />
[] load_module+0x6a50/0x70a0<br />
[] __do_sys_finit_module+0x12f/0x1c0<br />
[] do_syscall_64+0x3f/0x90<br />
[] entry_SYSCALL_64_after_hwframe+0x63/0xcd<br />
unreferenced object 0xffff8881127df000 (size 2048):<br />
comm "modprobe", pid 247, jiffies 4294972324 (age 78.728s)<br />
hex dump (first 32 bytes):<br />
20 65 6d 70 74 79 5f 73 79 6e 74 68 5f 74 65 73 empty_synth_tes<br />
74 20 20 70 69 64 5f 74 20 6e 65 78 74 5f 70 69 t pid_t next_pi<br />
backtrace:<br />
[] kmalloc_trace+0x26/0x100<br />
[] 0xffffffffa0008071<br />
[] 0xffffffffa00086ce<br />
[] do_one_initcall+0xdb/0x480<br />
[] do_init_module+0x1cf/0x680<br />
[] load_module+0x6a50/0x70a0<br />
[] __do_sys_finit_module+0x12f/0x1c0<br />
[] do_syscall_64+0x3f/0x90<br />
[] entry_SYSCALL_64_after_hwframe+0x63/0xcd
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.6 (including) | 5.10.156 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.80 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 6.0.10 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



