PT-2025-18518

CVE-2022-49801

·

Published

2025-05-01

·

Updated

2026-08-23

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak issue has been identified in the Linux kernel, specifically in the tracing read pipe() function. The kmemleak tool reports an unreferenced object, indicating a memory leakage problem. The issue occurs because the iter->fmt variable is allocated in the tracing read pipe() function but not freed, leading to a memory leak. The backtrace provided shows the sequence of function calls that lead to this issue.
Recommendations To resolve this issue, add a free operation in the tracing release pipe() function to release the allocated memory. This will prevent the memory leak and fix the vulnerability.
Note: Since the affected versions are not specified, it is recommended to apply this fix to all versions of the Linux kernel that are currently in use.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1778266904
SUSE-SU-2025:01918-1
SUSE-SU-2025:01966-1
SUSE-SU-2025:02173-1
SUSE-SU-2025_02173-1
SUSE-SU-2025:02262-1
SUSE-SU-2025_02262-1
SUSE-SU-2025:2173-1
Found an issue in the description? Have something to add? Feel free to write us 👾