{"id":"DEBIAN-CVE-2022-49853","details":"In the Linux kernel, the following vulnerability has been resolved:  net: macvlan: fix memory leaks of macvlan_common_newlink  kmemleak reports memory leaks in macvlan_common_newlink, as follows:   ip link add link eth0 name .. type macvlan mode source macaddr add  \u003cMAC-ADDR\u003e  kmemleak reports:  unreferenced object 0xffff8880109bb140 (size 64):   comm \"ip\", pid 284, jiffies 4294986150 (age 430.108s)   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 b8 aa 5a 12 80 88 ff ff  ..........Z.....     80 1b fa 0d 80 88 ff ff 1e ff ac af c7 c1 6b 6b  ..............kk   backtrace:     [\u003cffffffff813e06a7\u003e] kmem_cache_alloc_trace+0x1c7/0x300     [\u003cffffffff81b66025\u003e] macvlan_hash_add_source+0x45/0xc0     [\u003cffffffff81b66a67\u003e] macvlan_changelink_sources+0xd7/0x170     [\u003cffffffff81b6775c\u003e] macvlan_common_newlink+0x38c/0x5a0     [\u003cffffffff81b6797e\u003e] macvlan_newlink+0xe/0x20     [\u003cffffffff81d97f8f\u003e] __rtnl_newlink+0x7af/0xa50     [\u003cffffffff81d98278\u003e] rtnl_newlink+0x48/0x70     ...  In the scenario where the macvlan mode is configured as 'source', macvlan_changelink_sources() will be execured to reconfigure list of remote source mac addresses, at the same time, if register_netdevice() return an error, the resource generated by macvlan_changelink_sources() is not cleaned up.  Using this patch, in the case of an error, it will execute macvlan_flush_sources() to ensure that the resource is cleaned up.","modified":"2026-09-01T16:05:33.499471414Z","published":"2025-05-01T15:16:08.890Z","upstream":["CVE-2022-49853"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-49853"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49853.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49853.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49853.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}