CVE-2022-49334
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 13, 2025
CWE ID 401
Summary
CVE-2022-449334 is a vulnerability affecting the Linux kernel where a memory leak occurs in the mm/huge_memory module. Specifically, when xas_split_alloc() fails to allocate nodes to complete an xarray entry split, it sets the xa_state to -ENOMEM. Instead of freeing unnecessary memory as intended, xas_nomem() interprets this as a request to allocate more memory. To address this confusion, it is recommended to call xas_destroy() instead.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX