CVE-2022-49095

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49095
In the Linux kernel, the following vulnerability has been resolved: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() The error handling path of the probe releases a resource that is not freed in the remove function. In some cases, a ioremap() must be undone. Add the missing iounmap() call in the remove function.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/16ed828b872d12ccba8f07bcc446ae89ba662f9c Patch
https://git.kernel.org/stable/c/1e0c01319dedf1e63ec5df37ead048e17afd92ba Patch
https://git.kernel.org/stable/c/34a47f7ddb4fd1cbd12397aa6f7dad1de08b4050 Patch
https://git.kernel.org/stable/c/a845c678e094894f38cc9526d212b21933ce44c7 Patch
https://git.kernel.org/stable/c/aefd755a96051aa56b198cb7ecd168b22ba384f6 Patch
https://git.kernel.org/stable/c/c5f77b595379b5191316edd365a542f8b1526066 Patch
https://git.kernel.org/stable/c/ce430cfad6a5385d5b7f7c1dc3fa50f10abfd41b Patch
https://git.kernel.org/stable/c/db863ab2baf058ed05c7b723612e3c40c9dd6885 Patch
https://git.kernel.org/stable/c/de6aee0978f164d3d0c771ce03e3066a26c371c5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
History

23 Sep 2025, 16:41

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
CWE CWE-401
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: zorro7xx: Se corrige una pérdida de recursos en zorro7xx_remove_one() La ruta de manejo de errores de la sonda libera un recurso que no se libera en la función de eliminación. En algunos casos, se debe deshacer una operación ioremap(). Agregue la llamada iounmap() que falta en la función de eliminación.
References () https://git.kernel.org/stable/c/16ed828b872d12ccba8f07bcc446ae89ba662f9c - () https://git.kernel.org/stable/c/16ed828b872d12ccba8f07bcc446ae89ba662f9c - Patch
References () https://git.kernel.org/stable/c/1e0c01319dedf1e63ec5df37ead048e17afd92ba - () https://git.kernel.org/stable/c/1e0c01319dedf1e63ec5df37ead048e17afd92ba - Patch
References () https://git.kernel.org/stable/c/34a47f7ddb4fd1cbd12397aa6f7dad1de08b4050 - () https://git.kernel.org/stable/c/34a47f7ddb4fd1cbd12397aa6f7dad1de08b4050 - Patch
References () https://git.kernel.org/stable/c/a845c678e094894f38cc9526d212b21933ce44c7 - () https://git.kernel.org/stable/c/a845c678e094894f38cc9526d212b21933ce44c7 - Patch
References () https://git.kernel.org/stable/c/aefd755a96051aa56b198cb7ecd168b22ba384f6 - () https://git.kernel.org/stable/c/aefd755a96051aa56b198cb7ecd168b22ba384f6 - Patch
References () https://git.kernel.org/stable/c/c5f77b595379b5191316edd365a542f8b1526066 - () https://git.kernel.org/stable/c/c5f77b595379b5191316edd365a542f8b1526066 - Patch
References () https://git.kernel.org/stable/c/ce430cfad6a5385d5b7f7c1dc3fa50f10abfd41b - () https://git.kernel.org/stable/c/ce430cfad6a5385d5b7f7c1dc3fa50f10abfd41b - Patch
References () https://git.kernel.org/stable/c/db863ab2baf058ed05c7b723612e3c40c9dd6885 - () https://git.kernel.org/stable/c/db863ab2baf058ed05c7b723612e3c40c9dd6885 - Patch
References () https://git.kernel.org/stable/c/de6aee0978f164d3d0c771ce03e3066a26c371c5 - () https://git.kernel.org/stable/c/de6aee0978f164d3d0c771ce03e3066a26c371c5 - Patch
First Time Linux linux Kernel
Linux

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-09-23 16:41

NVD link : CVE-2022-49095

Mitre link : CVE-2022-49095

CVE.ORG link : CVE-2022-49095

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime