CVE-2022-49619

Published: Feb 26, 2025Modified: Oct 1, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: sfp: fix memory leak in sfp_probe() sfp_probe() allocates a memory chunk from sfp with sfp_alloc(). When devm_add_action() fails, sfp is not freed, which leads to a memory leak. We should use devm_add_action_or_reset() instead of devm_add_action().

Affected (10)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 4.14.289
Linux Linux Kernel	From 4.15 to 4.19.253
Linux Linux Kernel	From 4.20 to 5.4.207
Linux Linux Kernel	From 5.11 to 5.15.56
Linux Linux Kernel	From 5.16 to 5.18.13
Linux Linux Kernel	From 5.5 to 5.10.132
Linux Linux Kernel	Version 5.19 rc1
Linux Linux Kernel	Version 5.19 rc2
Linux Linux Kernel	Version 5.19 rc3
Linux Linux Kernel	Version 5.19 rc4