{
  "cveId": "CVE-2022-49013",
  "url": "https://patchblox.com/security/cve/CVE-2022-49013",
  "summary": "CVE-2022-49013 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49013, released October 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sctp: fix memory leak in sctp_stream_outq_migrat...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  sctp: fix memory leak in sctp_stream_outq_migrate()  When sctp_stream_outq_migrate() is called to release stream out resources, the memory pointed to by prio_head in stream out is not released.  The memory leak information is as follows:  unreferenced object 0xffff88801fe79f80 (size 64):    comm \u0022sctp_repo\u0022, pid 7957, jiffies 4294951704 (age 36.480s)    hex dump (first 32 bytes):      80 9f e7 1f 80 88 ff ff 80 9f e7 1f 80 88 ff ff  ................      90 9f e7 1f 80 88 ff ff 90 9f e7 1f 80 88 ff ff  ................    backtrace:      [\u003Cffffffff81b215c6\u003E] kmalloc_trace\u002B0x26/0x60      [\u003Cffffffff88ae517c\u003E] sctp_sched_prio_set\u002B0x4cc/0x770      [\u003Cffffffff88ad64f2\u003E] sctp_stream_init_ext\u002B0xd2/0x1b0      [\u003Cffffffff88aa2604\u003E] sctp_sendmsg_to_asoc\u002B0x1614/0x1a30      [\u003Cffffffff88ab7ff1\u003E] sctp_sendmsg\u002B0xda1/0x1ef0      [\u003Cffffffff87f765ed\u003E] inet_sendmsg\u002B0x9d/0xe0      [\u003Cffffffff8754b5b3\u003E] sock_sendmsg\u002B0xd3/0x120      [\u003Cffffffff8755446a\u003E] __sys_sendto\u002B0x23a/0x340      [\u003Cffffffff87554651\u003E] __x64_sys_sendto\u002B0xe1/0x1b0      [\u003Cffffffff89978b49\u003E] do_syscall_64\u002B0x39/0xb0      [\u003Cffffffff89a0008b\u003E] entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd",
  "published": "2024-10-21T20:15:12Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00242,
  "epssPercentile": 0.15461,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.12-1",
      "fix": "DEBIAN-CVE-2022-49013",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49013",
      "released": "2024-10-21T20:15:12Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.12-1",
      "fix": "DEBIAN-CVE-2022-49013",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49013",
      "released": "2024-10-21T20:15:12Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.12-1",
      "fix": "DEBIAN-CVE-2022-49013",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49013",
      "released": "2024-10-21T20:15:12Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}