PT-2025-8482 · Linux+3 · Linux Kernel+3
Publicado
2024-11-12
·
Atualizado
2025-09-29
·
CVE-2022-49549
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak issue has been identified in the Linux kernel. The problem occurs when the
threshold create bank() function fails in mce threshold create device(), causing the previously allocated threshold banks array @bp to be leaked. This happens because mce threshold remove device() does not free the array when threshold create bank() fails. The issue is resolved by adding a helper function to unwind the bank creation work and free the allocated array.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the memory leak in
mce threshold create device().
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Red Hat
Suse