{
  "cveId": "CVE-2022-49912",
  "url": "https://patchblox.com/security/cve/CVE-2022-49912",
  "summary": "CVE-2022-49912 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49912, released May 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix ulist leaks in error paths of qgroup...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix ulist leaks in error paths of qgroup self tests  In the test_no_shared_qgroup() and test_multiple_refs() qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from the test function without freeing the \u0022old_roots\u0022 ulist that was allocated by the previous calls to btrfs_find_all_roots(). Fix that by calling ulist_free() before returning.",
  "published": "2025-05-01T15:16:16Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00203,
  "epssPercentile": 0.10313,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.8-1",
      "fix": "DEBIAN-CVE-2022-49912",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49912",
      "released": "2025-05-01T15:16:16Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.8-1",
      "fix": "DEBIAN-CVE-2022-49912",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49912",
      "released": "2025-05-01T15:16:16Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.8-1",
      "fix": "DEBIAN-CVE-2022-49912",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49912",
      "released": "2025-05-01T15:16:16Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}