PT-2025-18588

CVE-2022-49871

·

Published

2022-11-02

·

Updated

2026-07-25

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to memory leaks in the Linux kernel, specifically in the napi get frags function. The problem occurs when tun get user() is called, leading to memory leaks in tun napi del(). The memory leaks are caused by the napi->rx list not being empty when gro normal list() is not called. To fix the issue, napi complete() should be added after napi gro frags().
Recommendations To resolve the issue, add napi complete() after napi gro frags() in the affected code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1778266904
OESA-2025-1820
SUSE-SU-2025:01918-1
SUSE-SU-2025:01966-1
SUSE-SU-2025:01983-1
SUSE-SU-2025_01983-1
SUSE-SU-2025:02173-1
SUSE-SU-2025_02173-1
SUSE-SU-2025:02262-1
SUSE-SU-2025_02262-1
SUSE-SU-2025:2173-1
Found an issue in the description? Have something to add? Feel free to write us 👾