CVE-2022-49148
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 13, 2025
CWE ID 401
Summary
CVE-2022-49148 is a Linux kernel vulnerability where the watch_queue module fails to free the associated page array when it is dismantled, leading to a memory leak. Commit 7ea1a0124b6d addressed the bitmap issue but overlooked the page array. The memory leak results in an unreferenced object, causing a potential denial-of-service (DoS) or stability issue. The vulnerability can be traced back to the pipe_ioctl function in fs/pipe.c.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX