CVE-2022-49994
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
14/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem<br />
<br />
The vmemmap pages is marked by kmemleak when allocated from memblock. <br />
Remove it from kmemleak when freeing the page. Otherwise, when we reuse<br />
the page, kmemleak may report such an error and then stop working.<br />
<br />
kmemleak: Cannot insert 0xffff98fb6eab3d40 into the object search tree (overlaps existing)<br />
kmemleak: Kernel memory leak detector disabled<br />
kmemleak: Object 0xffff98fb6be00000 (size 335544320):<br />
kmemleak: comm "swapper", pid 0, jiffies 4294892296<br />
kmemleak: min_count = 0<br />
kmemleak: count = 0<br />
kmemleak: flags = 0x1<br />
kmemleak: checksum = 0<br />
kmemleak: backtrace:
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.14 (including) | 5.15.64 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.19.6 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



