CVE-2022-49408: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49408 is a memory leak vulnerability discovered in the Linux kernel's ext4 filesystem component. The issue occurs in the parseapplysbmountoptions() function when processing on-disk mount options fails after memory allocation in the ext4fscontext, specifically affecting sqfnames. The vulnerability was disclosed on February 26, 2025 (NVD).

The vulnerability stems from improper memory management in the ext4 filesystem code. When processing on-disk mount options fails after memory allocation in the ext4fscontext structure, the allocated memory (e.g., sqfnames) is not properly freed. The issue was fixed by replacing direct kfree() calls with ext4fcfree() to ensure proper cleanup of allocated resources (Kernel Commit).

The vulnerability results in memory leaks in the Linux kernel when mounting ext4 filesystems with specific mount options. This can lead to gradual system memory depletion over time, potentially affecting system stability and performance (Ubuntu Security).

The issue has been fixed in the Linux kernel by modifying the cleanup process to use ext4fcfree() instead of kfree() directly. Users should update their Linux kernel to a patched version. Most major Linux distributions have marked their current releases as not affected by this vulnerability (Ubuntu Security).