--- cve: "CVE-2022-49803" severity: "LOW" cvss: 3.1 epss: "19%" vendor: "Linux" kev: false exploited: false published: "2025-05-01 15:16:03" tags: [cve, security, low] source: tsecurity.de CVE-Dossier exported: "2026-09-08T16:10:34+02:00" --- # CVE-2022-49803 > 3.1 LOW ## Beschreibung In the Linux kernel, the following vulnerability has been resolved: netdevsim: Fix memory leak of nsim_dev->fa_cookie kmemleak reports this issue: unreferenced object 0xffff8881bac872d0 (size 8): comm "sh", pid 58603, jiffies 4481524462 (age 68.065s) hex dump (first 8 bytes): 04 00 00 00 de ad be ef ........ backtrace: [] __kmalloc+0x49/0x150 [] nsim_dev_trap_fa_cookie_write+0xc1/0x210 [netdevsim] [] full_proxy_write+0xf3/0x180 [] vfs_write+0x1c5/0xaf0 [] ksys_write+0xed/0x1c0 [] do_syscall_64+0x3b/0x90 [] entry_SYSCALL_64_after_hwframe+0x63/0xcd The issue occurs in the following scenarios: nsim_dev_trap_fa_cookie_write() kmalloc() fa_cookie nsim_dev->fa_cookie = fa_cookie .. nsim_drv_remove() The fa_cookie allocked in nsim_dev_trap_fa_cookie_write() is not freed. To fix, add kfree(nsim_dev->fa_cookie) to nsim_drv_remove(). ## Patch verfügbar (OSV) - Kernel ≥ 5.10.260 - Kernel ≥ 5.15.209 - Kernel ≥ 6.0.10 ## Referenzen - - - - --- _Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2022-49803) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_