CVE-2022-49809: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49809 is a vulnerability discovered in the Linux kernel, specifically affecting the net/x25 subsystem. The vulnerability was disclosed on May 1, 2025, and involves a memory leak issue in the x25_lapb_receive_frame() function (NVD).

The vulnerability exists in the x25_lapb_receive_frame() function of the Linux kernel's X.25 network protocol implementation. When the function uses skb_copy() to create a private copy of a socket buffer, it fails to properly free the newly allocated buffer in certain error conditions, specifically in the undersized/fragmented skb error handling path. This results in a memory leak condition. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 with attack vector being Local (Red Hat).

The vulnerability can lead to memory leaks in the Linux kernel, which over time could potentially impact system performance and stability by consuming system resources (Wiz).

The vulnerability has been resolved through patches in the Linux kernel. System administrators should update to a patched version of the kernel that includes the fix for this memory leak (Wiz).