Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2022-49583: Linux kernel may leak memory on dummy receive packets
CVE-2022-49583 · published 1 year ago
Summary
The Linux kernel and several related distributions can fail to release memory when a special placeholder packet (dummy receive descriptor) is processed. This can gradually consume system memory, though it is a rare occurrence. Apply the latest kernel updates for your distribution to get the fix that correctly frees the memory.
What to do
- Update canonical linux-realtime to version 5.15.0-1022.22.
- Update canonical linux-aws-5.4 to version 5.4.0-1086.93~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1094.100~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1092.101~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-128.144~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1034.38~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1084.92~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1071.81~18.04.1.
- Update canonical linux to version 5.4.0-128.144.
- Update canonical linux-aws to version 5.4.0-1086.93.
- Update canonical linux-aws-5.15 to version 5.15.0-1021.25~20.04.1.
- Update canonical linux-azure to version 5.4.0-1094.100.
- Update canonical linux-azure-5.15 to version 5.15.0-1021.26~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1047.52.
- Update canonical linux-gcp to version 5.4.0-1090.98.
- Update canonical linux-gcp-5.15 to version 5.15.0-1021.28~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-50.56~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1034.38.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1017.22~20.04.1.
- Update canonical linux-iot to version 5.4.0-1005.7.
- Update canonical linux-kvm to version 5.4.0-1076.81.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-50.56~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1084.92.
- Update canonical linux-oracle-5.15 to version 5.15.0-1019.24~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1071.81.
- Update canonical linux-riscv-5.15 to version 5.15.0-1022.26~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1086.93+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1094.100+fips1.
- Update canonical linux-fips to version 5.4.0-1062.70.
- Update canonical linux-gcp-fips to version 5.4.0-1092.101+fips1.
- Update canonical linux to version 5.15.0-50.56.
- Update canonical linux-aws to version 5.15.0-1021.25.
- Update canonical linux-azure to version 5.15.0-1021.26.
- Update canonical linux-gcp to version 5.15.0-1019.25.
- Update canonical linux-gke to version 5.15.0-1017.20.
- Update canonical linux-gkeop to version 5.15.0-1004.6.
- Update canonical linux-ibm to version 5.15.0-1015.17.
- Update canonical linux-intel-iotg to version 5.15.0-1017.22.
- Update canonical linux-kvm to version 5.15.0-1019.23.
- Update canonical linux-lowlatency to version 5.15.0-50.56.
- Update canonical linux-nvidia to version 5.15.0-1015.15.
- Update canonical linux-oracle to version 5.15.0-1019.24.
- Update canonical linux-raspi to version 5.15.0-1016.18.
- Update canonical linux-azure-fde to version 5.15.0-1024.30.1.
- Update linux kernel to version 5.18.15.
- Update debian linux to version 5.18.16-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.1.20, < 5.2 >= 5.2.3, < 5.4.208 >= 5.5, < 5.10.134 >= 5.11, < 5.15.58 >= 5.16, < 5.18.15 5.19 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1022.22 Fix: upgrade to 5.15.0-1022.22
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:26.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1086.93~18.04.1 Fix: upgrade to 5.4.0-1086.93~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1094.100~18.04.1 Fix: upgrade to 5.4.0-1094.100~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1092.101~18.04.1 Fix: upgrade to 5.4.0-1092.101~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-128.144~18.04.1 Fix: upgrade to 5.4.0-128.144~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1034.38~18.04.1 Fix: upgrade to 5.4.0-1034.38~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1084.92~18.04.1 Fix: upgrade to 5.4.0-1084.92~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1071.81~18.04.1 Fix: upgrade to 5.4.0-1071.81~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-128.144 Fix: upgrade to 5.4.0-128.144
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1086.93 Fix: upgrade to 5.4.0-1086.93
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1021.25~20.04.1 Fix: upgrade to 5.15.0-1021.25~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1094.100 Fix: upgrade to 5.4.0-1094.100
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1021.26~20.04.1 Fix: upgrade to 5.15.0-1021.26~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1047.52 Fix: upgrade to 5.4.0-1047.52
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1090.98 Fix: upgrade to 5.4.0-1090.98
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1021.28~20.04.1 Fix: upgrade to 5.15.0-1021.28~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-50.56~20.04.1 Fix: upgrade to 5.15.0-50.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1034.38 Fix: upgrade to 5.4.0-1034.38
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1017.22~20.04.1 Fix: upgrade to 5.15.0-1017.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1005.7 Fix: upgrade to 5.4.0-1005.7
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1076.81 Fix: upgrade to 5.4.0-1076.81
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-50.56~20.04.1 Fix: upgrade to 5.15.0-50.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1084.92 Fix: upgrade to 5.4.0-1084.92
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1019.24~20.04.1 Fix: upgrade to 5.15.0-1019.24~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1071.81 Fix: upgrade to 5.4.0-1071.81
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1022.26~20.04.1 Fix: upgrade to 5.15.0-1022.26~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
Showing 50 of 133. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1086.93+fips1 Fix: upgrade to 5.4.0-1086.93+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1094.100+fips1 Fix: upgrade to 5.4.0-1094.100+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1062.70 Fix: upgrade to 5.4.0-1062.70
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1092.101+fips1 Fix: upgrade to 5.4.0-1092.101+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-50.56 Fix: upgrade to 5.15.0-50.56
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1021.25 Fix: upgrade to 5.15.0-1021.25
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1021.26 Fix: upgrade to 5.15.0-1021.26
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1024.30.1 Fix: upgrade to 5.15.0-1024.30.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1019.25 Fix: upgrade to 5.15.0-1019.25
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1017.20 Fix: upgrade to 5.15.0-1017.20
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1004.6 Fix: upgrade to 5.15.0-1004.6
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1015.17 Fix: upgrade to 5.15.0-1015.17
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1017.22 Fix: upgrade to 5.15.0-1017.22
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1019.23 Fix: upgrade to 5.15.0-1019.23
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-50.56 Fix: upgrade to 5.15.0-50.56
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1015.15 Fix: upgrade to 5.15.0-1015.15
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1019.24 Fix: upgrade to 5.15.0-1019.24
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1016.18 Fix: upgrade to 5.15.0-1016.18
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Linux | linux | kernel |
>= 5.16.0, < 5.18.15 Fix: upgrade to 5.18.15
|
| Debian:12 | debian | linux |
< 5.18.16-1 Fix: upgrade to 5.18.16-1
|
Original advisory text
iavf: Fix handling of dummy receive descriptors
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy receive descriptor properly. iavf_get_rx_buffer now sets the rx_buffer return value for dummy receive descriptors. Without this patch, when the hardware writes a dummy descriptor, iavf would not free the page allocated for the previous receive buffer. This is an unlikely event but can still happen. [Jesse: massaged commit message]
References
- https://git.kernel.org/stable/c/c6af94324911ef0846af1a5ce5e049ca736db34b Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49583... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49583 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2022-49583 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49583 Third Party Advisory
- https://git.kernel.org/linus/a9f49e0060301a9bfebeca76739158d0cf91cdf6 Third Party Advisory
- https://git.kernel.org/stable/c/2918419c06088f6709ceb543feb01752779ade4c Third Party Advisory
- https://git.kernel.org/stable/c/6edb818732fc05fda495f5b3a749bd1cee01398b Third Party Advisory
- https://git.kernel.org/stable/c/a9f49e0060301a9bfebeca76739158d0cf91cdf6 Third Party Advisory
- https://git.kernel.org/stable/c/d88d59faf4e6f9cc4767664206afdb999b10ec77 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49583 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-401Memory Leak
Timeline
Published26 Feb 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49583 · NVD
CVE-2022-49583 · OSV
UBUNTU-CVE-2022-49583 · OSV
DEBIAN-CVE-2022-49583 · OSV
Track software like this
Free during beta