{
  "cveId": "CVE-2022-49784",
  "url": "https://patchblox.com/security/cve/CVE-2022-49784",
  "summary": "CVE-2022-49784 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49784, released May 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  perf/x86/amd/uncore: Fix memory leak for events...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  perf/x86/amd/uncore: Fix memory leak for events array  When a CPU comes online, the per-CPU NB and LLC uncore contexts are freed but not the events array within the context structure. This causes a memory leak as identified by the kmemleak detector.    [...]   unreferenced object 0xffff8c5944b8e320 (size 32):     comm \u0022swapper/0\u0022, pid 1, jiffies 4294670387 (age 151.072s)     hex dump (first 32 bytes):       00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................       00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     backtrace:       [\u003C000000000759fb79\u003E] amd_uncore_cpu_up_prepare\u002B0xaf/0x230       [\u003C00000000ddc9e126\u003E] cpuhp_invoke_callback\u002B0x2cf/0x470       [\u003C0000000093e727d4\u003E] cpuhp_issue_call\u002B0x14d/0x170       [\u003C0000000045464d54\u003E] __cpuhp_setup_state_cpuslocked\u002B0x11e/0x330       [\u003C0000000069f67cbd\u003E] __cpuhp_setup_state\u002B0x6b/0x110       [\u003C0000000015365e0f\u003E] amd_uncore_init\u002B0x260/0x321       [\u003C00000000089152d2\u003E] do_one_initcall\u002B0x3f/0x1f0       [\u003C000000002d0bd18d\u003E] kernel_init_freeable\u002B0x1ca/0x212       [\u003C0000000030be8dde\u003E] kernel_init\u002B0x11/0x120       [\u003C0000000059709e59\u003E] ret_from_fork\u002B0x22/0x30   unreferenced object 0xffff8c5944b8dd40 (size 64):     comm \u0022swapper/0\u0022, pid 1, jiffies 4294670387 (age 151.072s)     hex dump (first 32 bytes):       00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................       00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     backtrace:       [\u003C00000000306efe8b\u003E] amd_uncore_cpu_up_prepare\u002B0x183/0x230       [\u003C00000000ddc9e126\u003E] cpuhp_invoke_callback\u002B0x2cf/0x470       [\u003C0000000093e727d4\u003E] cpuhp_issue_call\u002B0x14d/0x170       [\u003C0000000045464d54\u003E] __cpuhp_setup_state_cpuslocked\u002B0x11e/0x330       [\u003C0000000069f67cbd\u003E] __cpuhp_setup_state\u002B0x6b/0x110       [\u003C0000000015365e0f\u003E] amd_uncore_init\u002B0x260/0x321       [\u003C00000000089152d2\u003E] do_one_initcall\u002B0x3f/0x1f0       [\u003C000000002d0bd18d\u003E] kernel_init_freeable\u002B0x1ca/0x212       [\u003C0000000030be8dde\u003E] kernel_init\u002B0x11/0x120       [\u003C0000000059709e59\u003E] ret_from_fork\u002B0x22/0x30   [...]  Fix the problem by freeing the events array before freeing the uncore context.",
  "published": "2025-05-01T15:16:01Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.0017,
  "epssPercentile": 0.06465,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49784",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49784",
      "released": "2025-05-01T15:16:01Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49784",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49784",
      "released": "2025-05-01T15:16:01Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49784",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49784",
      "released": "2025-05-01T15:16:01Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}