{"id":"DEBIAN-CVE-2022-49959","details":"In the Linux kernel, the following vulnerability has been resolved:  openvswitch: fix memory leak at failed datapath creation  ovs_dp_cmd_new()-\u003eovs_dp_change()-\u003eovs_dp_set_upcall_portids() allocates array via kmalloc. If for some reason new_vport() fails during ovs_dp_cmd_new() dp-\u003eupcall_portids must be freed. Add missing kfree.  Kmemleak example: unreferenced object 0xffff88800c382500 (size 64):   comm \"dump_state\", pid 323, jiffies 4294955418 (age 104.347s)   hex dump (first 32 bytes):     5e c2 79 e4 1f 7a 38 c7 09 21 38 0c 80 88 ff ff  ^.y..z8..!8.....     03 00 00 00 0a 00 00 00 14 00 00 00 28 00 00 00  ............(...   backtrace:     [\u003c0000000071bebc9f\u003e] ovs_dp_set_upcall_portids+0x38/0xa0     [\u003c000000000187d8bd\u003e] ovs_dp_change+0x63/0xe0     [\u003c000000002397e446\u003e] ovs_dp_cmd_new+0x1f0/0x380     [\u003c00000000aa06f36e\u003e] genl_family_rcv_msg_doit+0xea/0x150     [\u003c000000008f583bc4\u003e] genl_rcv_msg+0xdc/0x1e0     [\u003c00000000fa10e377\u003e] netlink_rcv_skb+0x50/0x100     [\u003c000000004959cece\u003e] genl_rcv+0x24/0x40     [\u003c000000004699ac7f\u003e] netlink_unicast+0x23e/0x360     [\u003c00000000c153573e\u003e] netlink_sendmsg+0x24e/0x4b0     [\u003c000000006f4aa380\u003e] sock_sendmsg+0x62/0x70     [\u003c00000000d0068654\u003e] ____sys_sendmsg+0x230/0x270     [\u003c0000000012dacf7d\u003e] ___sys_sendmsg+0x88/0xd0     [\u003c0000000011776020\u003e] __sys_sendmsg+0x59/0xa0     [\u003c000000002e8f2dc1\u003e] do_syscall_64+0x3b/0x90     [\u003c000000003243e7cb\u003e] entry_SYSCALL_64_after_hwframe+0x63/0xcd","modified":"2026-08-27T23:04:47.144795548Z","published":"2025-06-18T11:15:23.127Z","upstream":["CVE-2022-49959"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-49959"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49959.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49959.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49959.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}