CVE-2022-49119

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49119
In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() In pm8001_chip_fw_flash_update_build(), if pm8001_chip_fw_flash_update_build() fails, the struct fw_control_ex allocated must be freed.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/a25ed5f21f94f9ae4bcc8dd747e978668890c921 Patch
https://git.kernel.org/stable/c/d83574666bac4b1462e90df393fbed6c5f57d1a3 Patch
https://git.kernel.org/stable/c/e5ecdb01952f230921aa8163d8d7f4c97c925ed8 Patch
https://git.kernel.org/stable/c/f792a3629f4c4aa4c3703d66b43ce1edcc3ec09a Patch
https://git.kernel.org/stable/c/fe5b8ea5583b5c3f6f68e06acba50387edf3b5d5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 21:33

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: pm8001: Se corrige la pérdida de memoria en pm8001_chip_fw_flash_update_req() En pm8001_chip_fw_flash_update_build(), si pm8001_chip_fw_flash_update_build() falla, la estructura fw_control_ex asignada debe liberarse.
References () https://git.kernel.org/stable/c/a25ed5f21f94f9ae4bcc8dd747e978668890c921 - () https://git.kernel.org/stable/c/a25ed5f21f94f9ae4bcc8dd747e978668890c921 - Patch
References () https://git.kernel.org/stable/c/d83574666bac4b1462e90df393fbed6c5f57d1a3 - () https://git.kernel.org/stable/c/d83574666bac4b1462e90df393fbed6c5f57d1a3 - Patch
References () https://git.kernel.org/stable/c/e5ecdb01952f230921aa8163d8d7f4c97c925ed8 - () https://git.kernel.org/stable/c/e5ecdb01952f230921aa8163d8d7f4c97c925ed8 - Patch
References () https://git.kernel.org/stable/c/f792a3629f4c4aa4c3703d66b43ce1edcc3ec09a - () https://git.kernel.org/stable/c/f792a3629f4c4aa4c3703d66b43ce1edcc3ec09a - Patch
References () https://git.kernel.org/stable/c/fe5b8ea5583b5c3f6f68e06acba50387edf3b5d5 - () https://git.kernel.org/stable/c/fe5b8ea5583b5c3f6f68e06acba50387edf3b5d5 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 21:33

NVD link : CVE-2022-49119

Mitre link : CVE-2022-49119

CVE.ORG link : CVE-2022-49119

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime