{"id":"DEBIAN-CVE-2022-49801","details":"In the Linux kernel, the following vulnerability has been resolved:  tracing: Fix memory leak in tracing_read_pipe()  kmemleak reports this issue:  unreferenced object 0xffff888105a18900 (size 128):   comm \"test_progs\", pid 18933, jiffies 4336275356 (age 22801.766s)   hex dump (first 32 bytes):     25 73 00 90 81 88 ff ff 26 05 00 00 42 01 58 04  %s......&...B.X.     03 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003c00000000560143a1\u003e] __kmalloc_node_track_caller+0x4a/0x140     [\u003c000000006af00822\u003e] krealloc+0x8d/0xf0     [\u003c00000000c309be6a\u003e] trace_iter_expand_format+0x99/0x150     [\u003c000000005a53bdb6\u003e] trace_check_vprintf+0x1e0/0x11d0     [\u003c0000000065629d9d\u003e] trace_event_printf+0xb6/0xf0     [\u003c000000009a690dc7\u003e] trace_raw_output_bpf_trace_printk+0x89/0xc0     [\u003c00000000d22db172\u003e] print_trace_line+0x73c/0x1480     [\u003c00000000cdba76ba\u003e] tracing_read_pipe+0x45c/0x9f0     [\u003c0000000015b58459\u003e] vfs_read+0x17b/0x7c0     [\u003c000000004aeee8ed\u003e] ksys_read+0xed/0x1c0     [\u003c0000000063d3d898\u003e] do_syscall_64+0x3b/0x90     [\u003c00000000a06dda7f\u003e] entry_SYSCALL_64_after_hwframe+0x63/0xcd  iter-\u003efmt alloced in   tracing_read_pipe() -\u003e .. -\u003etrace_iter_expand_format(), but not freed, to fix, add free in tracing_release_pipe()","modified":"2026-09-01T20:04:56.357876055Z","published":"2025-05-01T15:16:03.407Z","upstream":["CVE-2022-49801"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-49801"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49801.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49801.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49801.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}