What’s Vulnerable › Vulnerabilities

CVE-2022-3544: Linux Kernel Netfilter sysfs.c damon_sysfs_add_target memory leak

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-17 · updated 2026-06-17
• Weakness: CWE-404

Description

A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected is the function damon_sysfs_add_target of the file mm/damon/sysfs.c of the component Netfilter. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211044.

Affected products

• Linux kernel: before 6.0; 6.0-rc1, 6.0-rc2, 6.0-rc3, 6.0-rc4, 6.0-rc5, 6.0-rc6 (+1) — fixed in 6.0

How to fix

Upgrade to a fixed version: Linux kernel 6.0. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git/commit/?id=1c8e2349f2d033f634d046063b704b2ca6c46972
• https://vuldb.com/?id.211044
• https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git/commit/?id=1c8e2349f2d033f634d046063b704b2ca6c46972
• https://vuldb.com/?id.211044

Get alerted when CVE-2022-3544 or the next vulnerability affects your stack