{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"7d79725a7073d86b9185f87718e22f3d65115801","status":"affected","version":"d3cbb907ae57fe5da314b51d949b617b538bdeae","versionType":"git"},{"lessThan":"6d463ddd0107d4188229d996dcdd45c99bad8af7","status":"affected","version":"d3cbb907ae57fe5da314b51d949b617b538bdeae","versionType":"git"},{"lessThan":"207edad5717e0a5709ce8467f0eff41c607835c9","status":"affected","version":"d3cbb907ae57fe5da314b51d949b617b538bdeae","versionType":"git"},{"lessThan":"064bc7312bd09a48798418663090be0c776183db","status":"affected","version":"d3cbb907ae57fe5da314b51d949b617b538bdeae","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.7"},{"lessThan":"5.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.260","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49803","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetdevsim: Fix memory leak of nsim_dev->fa_cookie\n\nkmemleak reports this issue:\n\nunreferenced object 0xffff8881bac872d0 (size 8):\n  comm \"sh\", pid 58603, jiffies 4481524462 (age 68.065s)\n  hex dump (first 8 bytes):\n    04 00 00 00 de ad be ef                          ........\n  backtrace:\n    [<00000000c80b8577>] __kmalloc+0x49/0x150\n    [<000000005292b8c6>] nsim_dev_trap_fa_cookie_write+0xc1/0x210 [netdevsim]\n    [<0000000093d78e77>] full_proxy_write+0xf3/0x180\n    [<000000005a662c16>] vfs_write+0x1c5/0xaf0\n    [<000000007aabf84a>] ksys_write+0xed/0x1c0\n    [<000000005f1d2e47>] do_syscall_64+0x3b/0x90\n    [<000000006001c6ec>] entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nThe issue occurs in the following scenarios:\n\nnsim_dev_trap_fa_cookie_write()\n  kmalloc() fa_cookie\n  nsim_dev->fa_cookie = fa_cookie\n..\nnsim_drv_remove()\n\nThe fa_cookie allocked in nsim_dev_trap_fa_cookie_write() is not freed. To\nfix, add kfree(nsim_dev->fa_cookie) to nsim_drv_remove().","epss":{"date":"2026-11-05","percentile":0.10367,"score":0.00203},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908190198,"publishedAt":1746108570971,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7d79725a7073d86b9185f87718e22f3d65115801"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6d463ddd0107d4188229d996dcdd45c99bad8af7"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/207edad5717e0a5709ce8467f0eff41c607835c9"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/064bc7312bd09a48798418663090be0c776183db"}],"remediation":[],"revision":"f10a323f6c35d0750afb92dcce02e69c7d86a47e4ff6fd71c749aaf375d3f54a","sources":[{"modifiedAt":1793908190198,"name":"CNA: Linux","retrievedAt":1793909440238,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49803"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909453439,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49803"}],"ssvc":{"assessedAt":1793908138960,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"netdevsim: Fix memory leak of nsim_dev->fa_cookie","updatedAt":1793909453439}