Memory Leak Vulnerability in Linux Kernel - Debian Packages
Summary
CVE-2022-49461: In the Linux kernel, the following vulnerability has been resolved: amt: fix memory leak for advertisement message When a gateway receives an advertisement message, it extracts relay information and then it should be fre... Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used in various distributions, including Debian. This vulnerability specifically affects Debian versions 12 and 13, where the kernel fails to properly manage memory during the handling of advertisement messages, leading to potential memory leaks.
Vulnerability Detail
The vulnerability, identified as CVE-2022-49461, arises when a gateway receives an advertisement message and extracts relay information that is not subsequently freed. This oversight in the advertisement handler results in a memory leak, which can degrade system performance over time and potentially lead to denial of service if the memory is exhausted. The issue is rooted in the kernel's memory management logic, where proper cleanup routines are not invoked.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The CVE-2022-49461 vulnerability in the Linux kernel poses a significant risk due to its potential to cause memory leaks. Users of Debian 12 and 13 are urged to update their systems to the patched version 5.18.5-1 to mitigate this issue. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49461 is a vulnerability in the Linux kernel that causes a memory leak when handling advertisement messages.
Debian versions 12 and 13 are affected by this vulnerability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The memory leak can lead to degraded system performance and may eventually cause a denial of service if the memory is exhausted.
Yes, a patch is available in version 5.18.5-1 of the Linux kernel for both Debian 12 and 13.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
