CVE-2022-49408

MEDIUM EPSS 14.6%
Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in parse_apply_sb_mount_options() If processing the on-disk mount options fails after any memory was allocated in the ext4_fs_context, e.g. s_qf_names, then this memory is leaked. Fix this by calling ext4_fc_free() instead of kfree() directly. Reproducer: mkfs.ext4 -F /dev/vdc tune2fs /dev/vdc -E mount_opts=usrjquota=file echo clear > /sys/kernel/debug/kmemleak mount /dev/vdc /vdc echo scan > /sys/kernel/debug/kmemleak sleep 5 echo scan > /sys/kernel/debug/kmemleak cat /sys/kernel/debug/kmemleak

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
14.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 2

VendorProductVersionRange
linuxlinux_kernel*≥5.17  –  <5.17.14
linuxlinux_kernel*≥5.18  –  <5.18.3

References 3

  • git.kernel.org https://git.kernel.org/stable/c/9ea3e6168948189cec31d0678d2b55b395f88491
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c069db76ed7b681c69159f44be96d2137e9ca989
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f92ded66e9d0aa20b883a2a5183973abc8f41815
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/9ea3e6168948189cec31d0678d2b55b395f88491
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c069db76ed7b681c69159f44be96d2137e9ca989
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f92ded66e9d0aa20b883a2a5183973abc8f41815
    Patch