CVE-2022-49795

MEDIUM

Linux Kernel < 6.0.10 - Memory Leak

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: rethook: fix a potential memleak in rethook_alloc() In rethook_alloc(), the variable rh is not freed or passed out if handler is NULL, which could lead to a memleak, fix it. [Masami: Add "rethook:" tag to the title.] Acke-by: Masami Hiramatsu (Google) <[email protected]>

References (2)

[Patch] https://git.kernel.org/stable/c/0a1ebe35cb3b7aa1f4b26b37e2a0b9ae68dc4ffb

[Patch] https://git.kernel.org/stable/c/cbc5d1f9a8cc40ba2bc6779b36d2ea1f65bc027c

Scores

CVSS v3 5.5

EPSS 0.0007

EPSS Percentile 22.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (7)

linux/linux_kernel < 6.0.10

linux/linux_kernel

linux/Kernel < 6.0.10linux

Timeline

Published May 01, 2025

Tracked Since Feb 18, 2026