PT-2025-18604 · Linux+2 · Linux Kernel+2
Published
2025-05-01
·
Updated
2025-07-10
·
CVE-2022-49887
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A possible refcount leak in the
vdec probe() function has been resolved. The issue occurs when vdec probe fails or vdec remove is called, and v4l2 device unregister is not called to put the refcount obtained by v4l2 device register.Recommendations
To resolve the issue, ensure that
v4l2 device unregister is called when vdec probe fails or vdec remove is called to properly put the refcount obtained by v4l2 device register.
As a temporary workaround, consider reviewing the code to ensure that the refcount is properly handled in the vdec probe function and when vdec remove is called.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse