CVE-2022-49283

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49283
In the Linux kernel, the following vulnerability has been resolved: firmware: sysfb: fix platform-device leak in error path Make sure to free the platform device also in the unlikely event that registration fails.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/202c08914ba50dd324e42d5ad99535a89f242560 Patch
https://git.kernel.org/stable/c/b3e38f939ab4d0d86f56bff3362c3f88c4b2ad32 Patch
https://git.kernel.org/stable/c/bb7fcbe80a013dc883181dc818c407d38558f76c Patch
https://git.kernel.org/stable/c/fed4df558b8cdb6f3beea38a7c977f118f082b0d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

22 Sep 2025, 20:44

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/202c08914ba50dd324e42d5ad99535a89f242560 - () https://git.kernel.org/stable/c/202c08914ba50dd324e42d5ad99535a89f242560 - Patch
References () https://git.kernel.org/stable/c/b3e38f939ab4d0d86f56bff3362c3f88c4b2ad32 - () https://git.kernel.org/stable/c/b3e38f939ab4d0d86f56bff3362c3f88c4b2ad32 - Patch
References () https://git.kernel.org/stable/c/bb7fcbe80a013dc883181dc818c407d38558f76c - () https://git.kernel.org/stable/c/bb7fcbe80a013dc883181dc818c407d38558f76c - Patch
References () https://git.kernel.org/stable/c/fed4df558b8cdb6f3beea38a7c977f118f082b0d - () https://git.kernel.org/stable/c/fed4df558b8cdb6f3beea38a7c977f118f082b0d - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: sysfb: se corrige la fuga del dispositivo de plataforma en la ruta de error. Asegúrese de liberar el dispositivo de plataforma también en el improbable caso de que falle el registro.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
First Time Linux linux Kernel
Linux

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-09-22 20:44

NVD link : CVE-2022-49283

Mitre link : CVE-2022-49283

CVE.ORG link : CVE-2022-49283

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime