CVE-2022-49809: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix skb leak in x25_lapb_receive_frame() x25_lapb_receive_frame() using skb_copy() to get a private copy of skb, the new skb should be freed in the undersized/fragmented skb error handling path. Otherwise there is a memory leak.

Affected products

• Linux Linux Kernel: from 3.0.72, before 3.1 (fixed in 3.1); from 3.1.1, before 4.9.334 (fixed in 4.9.334); from 4.10, before 4.14.300 (fixed in 4.14.300); from 4.15, before 4.19.267 (fixed in 4.19.267); from 4.20, before 5.4.225 (fixed in 5.4.225); from 5.5, before 5.10.156 (fixed in 5.10.156); …

Published 2025-05-01. Last modified 2026-06-17.