Memory Leak Vulnerability in Linux Kernel - CVE-2022-49795
Summary
CVE-2022-49795: In the Linux kernel, the following vulnerability has been resolved: rethook: fix a potential memleak in rethook_alloc() In rethook_alloc(), the variable rh is not freed or passed out if handler is NULL, which could lead... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its stability, performance, and security features. However, like any complex software, it can have vulnerabilities. CVE-2022-49795 addresses a specific memory leak issue in the rethook_alloc() function, which could lead to resource exhaustion if not resolved.
Vulnerability Detail
CVE-2022-49795 is a memory leak vulnerability found in the Linux kernel's rethook_alloc() function. The issue arises when the handler variable is NULL, causing the allocated memory for the variable 'rh' to not be freed. This oversight can lead to a gradual increase in memory usage, potentially exhausting system resources and affecting system stability. The vulnerability was identified and fixed in version 6.0.10-1 of the Linux package.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating to the fixed version.
Conclusion
CVE-2022-49795 is a critical memory leak vulnerability in the Linux kernel that requires immediate attention. Users are advised to update to the patched version to ensure system stability and security. Utilizing tools like Vulert can help in monitoring vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49795 is a memory leak vulnerability in the Linux kernel that occurs in the rethook_alloc() function.
If exploited, this vulnerability can lead to increased memory usage, potentially causing system instability or crashes.
Yes, the vulnerability has been fixed in version 6.0.10-1 of the Linux package.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software without needing access to the code.
While there are no specific workarounds, it is recommended to monitor your system's memory usage and plan for an update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
