CVE-2022-49795: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49795 is a vulnerability discovered in the Linux kernel, specifically in the rethook subsystem. The vulnerability was disclosed on May 1, 2025, and involves a potential memory leak in the rethook_alloc() function where the variable rh is not properly managed when the handler parameter is NULL (NVD).

The vulnerability exists in the rethook_alloc() function of the Linux kernel's rethook subsystem. The technical issue occurs when the handler parameter is NULL, causing the rh variable to neither be freed nor passed out, resulting in a memory leak condition. The vulnerability has been assigned a CVSS v3 Base Score of 5.5 by Red Hat, indicating moderate severity (Red Hat).

The primary impact of this vulnerability is a memory leak in the Linux kernel. If exploited, this could lead to resource exhaustion over time, particularly if the vulnerability is triggered repeatedly (Wiz).

The vulnerability has been resolved through a patch that properly handles the case when the handler parameter is NULL in the rethook_alloc() function. Red Hat Enterprise Linux 9 has deferred the fix, while versions 6, 7, and 8 are not affected (Red Hat).