CVE-2022-49091

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49091
In the Linux kernel, the following vulnerability has been resolved: drm/imx: Fix memory leak in imx_pd_connector_get_modes Avoid leaking the display mode variable if of_get_drm_display_mode fails. Addresses-Coverity-ID: 1443943 ("Resource leak")

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/31e449302ed00c38d4068443cf0243279701ab28 Patch
https://git.kernel.org/stable/c/38bf605bd8c83d942c8dcffaef3633b7d8b37549 Patch
https://git.kernel.org/stable/c/41624d7c0c3df71dee170c610744aaa5909327b8 Patch
https://git.kernel.org/stable/c/7526102d908ec5ae777aa77723d52fce12916093 Patch
https://git.kernel.org/stable/c/bc23c327e1a23cc3555fa1e86288e13288515442 Patch
https://git.kernel.org/stable/c/bce81feb03a20fca7bbdd1c4af16b4e9d5c0e1d3 Patch
https://git.kernel.org/stable/c/c539a6a5896ed92bfb91494e46996d013f3d5967 Patch
https://git.kernel.org/stable/c/d2c2758cfb0262637fd93350bdc8ad485fb1dd61 Patch
https://git.kernel.org/stable/c/f8b0ef0a5889890b50482b6593bd8de544736351 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
History

23 Sep 2025, 16:40

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/imx: Se corrige la pérdida de memoria en imx_pd_connector_get_modes Evita la pérdida de la variable de modo de visualización si falla of_get_drm_display_mode. Addresses-Coverity-ID: 1443943 ("Fuga de recursos")
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
References () https://git.kernel.org/stable/c/31e449302ed00c38d4068443cf0243279701ab28 - () https://git.kernel.org/stable/c/31e449302ed00c38d4068443cf0243279701ab28 - Patch
References () https://git.kernel.org/stable/c/38bf605bd8c83d942c8dcffaef3633b7d8b37549 - () https://git.kernel.org/stable/c/38bf605bd8c83d942c8dcffaef3633b7d8b37549 - Patch
References () https://git.kernel.org/stable/c/41624d7c0c3df71dee170c610744aaa5909327b8 - () https://git.kernel.org/stable/c/41624d7c0c3df71dee170c610744aaa5909327b8 - Patch
References () https://git.kernel.org/stable/c/7526102d908ec5ae777aa77723d52fce12916093 - () https://git.kernel.org/stable/c/7526102d908ec5ae777aa77723d52fce12916093 - Patch
References () https://git.kernel.org/stable/c/bc23c327e1a23cc3555fa1e86288e13288515442 - () https://git.kernel.org/stable/c/bc23c327e1a23cc3555fa1e86288e13288515442 - Patch
References () https://git.kernel.org/stable/c/bce81feb03a20fca7bbdd1c4af16b4e9d5c0e1d3 - () https://git.kernel.org/stable/c/bce81feb03a20fca7bbdd1c4af16b4e9d5c0e1d3 - Patch
References () https://git.kernel.org/stable/c/c539a6a5896ed92bfb91494e46996d013f3d5967 - () https://git.kernel.org/stable/c/c539a6a5896ed92bfb91494e46996d013f3d5967 - Patch
References () https://git.kernel.org/stable/c/d2c2758cfb0262637fd93350bdc8ad485fb1dd61 - () https://git.kernel.org/stable/c/d2c2758cfb0262637fd93350bdc8ad485fb1dd61 - Patch
References () https://git.kernel.org/stable/c/f8b0ef0a5889890b50482b6593bd8de544736351 - () https://git.kernel.org/stable/c/f8b0ef0a5889890b50482b6593bd8de544736351 - Patch

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-09-23 16:40

NVD link : CVE-2022-49091

Mitre link : CVE-2022-49091

CVE.ORG link : CVE-2022-49091

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime