CVE-2022-49115

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49115
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix misused goto label Fix a misused goto label jump since that can result in a memory leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/70236a0d2d62b081d52076de22d8d017d6cbe99f Patch
https://git.kernel.org/stable/c/7c657c0694ff690e361a13ce41c36b9dfb433ec8 Patch
https://git.kernel.org/stable/c/bf8d87c076f55b8b4dfdb6bc6c6b6dc0c2ccb487 Patch
https://git.kernel.org/stable/c/d3642fc64276b06446290f82fd45630aeaa4b007 Patch
https://git.kernel.org/stable/c/dc9d33b2d8d09e6478e8ef817a81cf26930acc3e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 21:33

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: endpoint: Reparar etiqueta goto mal utilizada Reparar un salto de etiqueta goto mal utilizado, ya que puede provocar una pérdida de memoria.
References () https://git.kernel.org/stable/c/70236a0d2d62b081d52076de22d8d017d6cbe99f - () https://git.kernel.org/stable/c/70236a0d2d62b081d52076de22d8d017d6cbe99f - Patch
References () https://git.kernel.org/stable/c/7c657c0694ff690e361a13ce41c36b9dfb433ec8 - () https://git.kernel.org/stable/c/7c657c0694ff690e361a13ce41c36b9dfb433ec8 - Patch
References () https://git.kernel.org/stable/c/bf8d87c076f55b8b4dfdb6bc6c6b6dc0c2ccb487 - () https://git.kernel.org/stable/c/bf8d87c076f55b8b4dfdb6bc6c6b6dc0c2ccb487 - Patch
References () https://git.kernel.org/stable/c/d3642fc64276b06446290f82fd45630aeaa4b007 - () https://git.kernel.org/stable/c/d3642fc64276b06446290f82fd45630aeaa4b007 - Patch
References () https://git.kernel.org/stable/c/dc9d33b2d8d09e6478e8ef817a81cf26930acc3e - () https://git.kernel.org/stable/c/dc9d33b2d8d09e6478e8ef817a81cf26930acc3e - Patch

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 21:33

NVD link : CVE-2022-49115

Mitre link : CVE-2022-49115

CVE.ORG link : CVE-2022-49115

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime