CVE-2022-49648

Summary

CVE-2022-49648 is a vulnerability in the Linux kernel's tracing/histograms component. This issue, which has been resolved, involved a memory leak problem with the parsing of variable definitions. The cause was a commit that attempted to fix a double free issue but inadvertently introduced a memory leak instead. When allocating memory for the N-th var_defs.expr, the N-th var_defs.name was not properly freed, leading to a memory leak. Enabling CONFIG_DEBUG_KMEMLEAK and injecting a fault at the allocation site could reveal this unreferenced memory.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.