Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2022-49981
CVE-2022-49981:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2022-49981 is a memory leak vulnerability identified in the Linux kernel's HID (Human Interface Device) subsystem, specifically in the hidraw_release() function. The vulnerability was disclosed on June 18, 2025, affecting the Linux kernel's memory management system (NVD, Wiz).
Technical details
The vulnerability manifests as an unreferenced object memory leak of size 32 bytes, occurring in the 'softirq' process with PID 0. The issue specifically occurs in the hidrawreportevent function at drivers/hid/hidraw.c:521, where buffered reports are not properly freed before list entry deletion. The vulnerability stems from a failure to free buffered reports before deleting list entries (NVD, Wiz).
Impact
The vulnerability results in a memory leak in the Linux kernel's HID subsystem, which could lead to resource exhaustion over time. This could potentially affect system stability and performance (Wiz).
Mitigation and workarounds
The vulnerability has been resolved by implementing proper memory management in the hidraw_release() function, ensuring that buffered reports are freed before deleting the list entry (Wiz).
Additional resources
Source: This report was generated using AI
Related Linux Kernel vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management