In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in error flow for subscribe event routine In case the second xa_insert() fails, the obj_event is not released. Fix the error unwind flow to free that memory to avoid a memory leak.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0174a89663a5ef83617da15bf24c0af2f62b6c7f cve-icon cve-icon
https://git.kernel.org/stable/c/087f9c3f2309ed183f7e4b85ae57121d8663224d cve-icon cve-icon
https://git.kernel.org/stable/c/414b4e8738484379f18d6c4e780787c80dbf8a2c cve-icon cve-icon
https://git.kernel.org/stable/c/8dd392e352d3269938fea32061a74655a613f929 cve-icon cve-icon
https://git.kernel.org/stable/c/c98d903ff9e79c210beddea4e6bc15ac38e25aa5 cve-icon cve-icon
https://git.kernel.org/stable/c/d66498507801fd9a20307a15a0814a0a016c3cde cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022618-CVE-2022-49206-51a6@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49206 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49206 cve-icon
History

Thu, 02 Oct 2025 09:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 26 Mar 2025 15:30:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Moderate

 threat_severity

Low

Tue, 18 Mar 2025 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in error flow for subscribe event routine In case the second xa_insert() fails, the obj_event is not released. Fix the error unwind flow to free that memory to avoid a memory leak.
Title RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T01:55:45.685Z

Updated: 2025-10-01T19:56:58.741Z

Reserved: 2025-02-26T01:49:39.291Z

Link: CVE-2022-49206

cve-icon Vulnrichment

Updated: 2025-10-01T16:09:09.906Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:00:57.723

Modified: 2025-10-01T20:15:55.350

Link: CVE-2022-49206

cve-icon Redhat

Severity : Low

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49206 - Bugzilla