Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2022-49878: Linux kernel BPF component can leak memory
CVE-2022-49878 · published 1 year ago
Summary
The BPF part of the Linux kernel could lose some memory when it tried to grow an internal array and the reallocation failed. This leak could slowly reduce available memory on systems using the affected kernel packages. Install the latest kernel updates from your distribution (linux-linux_kernel, canonical-linux-hwe, canonical-linux-oem, canonical-linux-hwe-edge, canonical-linux-aws-5.0) to apply the fix.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1031.35~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1034.41~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1030.37~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-67.74~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1026.31~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-67.74~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1014.14~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1030.36~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1030.34~20.04.1.
- Update canonical linux to version 5.15.0-67.74.
- Update canonical linux-aws to version 5.15.0-1031.35.
- Update canonical linux-azure to version 5.15.0-1034.41.
- Update canonical linux-gcp to version 5.15.0-1030.37.
- Update canonical linux-gke to version 5.15.0-1028.33.
- Update canonical linux-gkeop to version 5.15.0-1016.21.
- Update canonical linux-ibm to version 5.15.0-1026.29.
- Update canonical linux-intel-iotg to version 5.15.0-1026.31.
- Update canonical linux-kvm to version 5.15.0-1029.34.
- Update canonical linux-lowlatency to version 5.15.0-67.74.
- Update canonical linux-nvidia to version 5.15.0-1023.23.
- Update canonical linux-oracle to version 5.15.0-1030.36.
- Update canonical linux-raspi to version 5.15.0-1025.27.
- Update canonical linux-bluefield to version 5.15.0-1014.16.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1022.27.
- Update canonical linux-realtime to version 5.15.0-1033.36.
- Update canonical linux-azure-fde to version 5.15.0-1034.41.1.
- Update debian linux to version 6.0.10-1.
- Update linux kernel to version 6.0.9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.14, < 5.15.79 >= 5.16, < 6.0.9 6.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1031.35~20.04.1 Fix: upgrade to 5.15.0-1031.35~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1034.41~20.04.1 Fix: upgrade to 5.15.0-1034.41~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1030.37~20.04.1 Fix: upgrade to 5.15.0-1030.37~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-67.74~20.04.1 Fix: upgrade to 5.15.0-67.74~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1026.31~20.04.1 Fix: upgrade to 5.15.0-1026.31~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-67.74~20.04.1 Fix: upgrade to 5.15.0-67.74~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1014.14~20.04.1 Fix: upgrade to 5.15.0-1014.14~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1030.36~20.04.1 Fix: upgrade to 5.15.0-1030.36~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1030.34~20.04.1 Fix: upgrade to 5.15.0-1030.34~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
Showing 50 of 105. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-67.74 Fix: upgrade to 5.15.0-67.74
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1031.35 Fix: upgrade to 5.15.0-1031.35
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1034.41 Fix: upgrade to 5.15.0-1034.41
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1030.37 Fix: upgrade to 5.15.0-1030.37
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1028.33 Fix: upgrade to 5.15.0-1028.33
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1016.21 Fix: upgrade to 5.15.0-1016.21
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1026.29 Fix: upgrade to 5.15.0-1026.29
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1026.31 Fix: upgrade to 5.15.0-1026.31
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1029.34 Fix: upgrade to 5.15.0-1029.34
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-67.74 Fix: upgrade to 5.15.0-67.74
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1023.23 Fix: upgrade to 5.15.0-1023.23
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1030.36 Fix: upgrade to 5.15.0-1030.36
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1025.27 Fix: upgrade to 5.15.0-1025.27
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1014.16 Fix: upgrade to 5.15.0-1014.16
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1022.27 Fix: upgrade to 5.15.0-1022.27
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1033.36 Fix: upgrade to 5.15.0-1033.36
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1034.41.1 Fix: upgrade to 5.15.0-1034.41.1
|
| Debian:12 | debian | linux |
< 6.0.10-1 Fix: upgrade to 6.0.10-1
|
| Linux | linux | kernel |
>= 5.16.0, < 6.0.9 Fix: upgrade to 6.0.9
|
Original advisory text
bpf, verifier: Fix memory leak in array reallocation for stack state
In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error (NULL) is returned by krealloc(), callers of realloc_array() were setting their allocation pointers to NULL, but on error krealloc() does not touch the original allocation. This would result in a memory resource leak. Instead, free the old allocation on the error handling path. The memory leak information is as follows as also reported by Zhengchao: unreferenced object 0xffff888019801800 (size 256): comm "bpf_repo", pid 6490, jiffies 4294959200 (age 17.170s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000b211474b>] __kmalloc_node_track_caller+0x45/0xc0 [<0000000086712a0b>] krealloc+0x83/0xd0 [<00000000139aab02>] realloc_array+0x82/0xe2 [<00000000b1ca41d1>] grow_stack_state+0xfb/0x186 [<00000000cd6f36d2>] check_mem_access.cold+0x141/0x1341 [<0000000081780455>] do_check_common+0x5358/0xb350 [<0000000015f6b091>] bpf_check.cold+0xc3/0x29d [<000000002973c690>] bpf_prog_load+0x13db/0x2240 [<00000000028d1644>] __sys_bpf+0x1605/0x4ce0 [<00000000053f29bd>] __x64_sys_bpf+0x75/0xb0 [<0000000056fedaf5>] do_syscall_64+0x35/0x80 [<000000002bd58261>] entry_SYSCALL_64_after_hwframe+0x63/0xcd
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49878... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49878 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2022-49878 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49878 Third Party Advisory
- https://git.kernel.org/linus/42378a9ca55347102bbf86708776061d8fe3ece2 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49878 Vendor Advisory
- https://git.kernel.org/stable/c/06615967d4889b08b19ff3dda96e8b131282f73d Third Party Advisory
- https://git.kernel.org/stable/c/3e210891c4a4c2d858cd6f9f61d5809af251d4df Third Party Advisory
- https://git.kernel.org/stable/c/42378a9ca55347102bbf86708776061d8fe3ece2 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
6.8
Medium
Type
CWE-401Memory Leak
Timeline
Published1 May 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49878 · NVD
CVE-2022-49878 · OSV
UBUNTU-CVE-2022-49878 · OSV
DEBIAN-CVE-2022-49878 · OSV
Track software like this
Free during beta