CVE-2022-49191
published 2025-02-26CVE-2022-49191: In the Linux kernel, the following vulnerability has been resolved: mxser: fix xmit_buf leak in activate when LSR == 0xff When LSR is 0xff in ->activate()…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.27%
19.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
mxser: fix xmit_buf leak in activate when LSR == 0xff
When LSR is 0xff in ->activate() (rather unlike), we return an error.
Provided ->shutdown() is not called when ->activate() fails, nothing
actually frees the buffer in this case.
Fix this by properly freeing the buffer in a designated label. We jump
there also from the "!info->type" if now too.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < 376922045009f8ea2d20a8fa3475e95b47c41690 | 376922045009f8ea2d20a8fa3475e95b47c41690 |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < 125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d | 125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < 685b6d16bf89595310b5d61394c9b97cc9505c7c | 685b6d16bf89595310b5d61394c9b97cc9505c7c |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < 996291d06851a26678a0fab488b6e1f0677c0576 | 996291d06851a26678a0fab488b6e1f0677c0576 |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < 2cd05c38a27bee7fb42aa4d43174d68ac55dac0f | 2cd05c38a27bee7fb42aa4d43174d68ac55dac0f |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < b125b08dbee3611f03f53b71471813ed4ccafcdd | b125b08dbee3611f03f53b71471813ed4ccafcdd |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < 6c9041b2f90c0eace73106f22350e1d2c98f5edc | 6c9041b2f90c0eace73106f22350e1d2c98f5edc |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < 6dffc2035fbaada60ca8db59e0962e34f760370a | 6dffc2035fbaada60ca8db59e0962e34f760370a |
| linux | linux | >= 6769140d304731f0a3b177470a2adb4bacd9036b < cd3a4907ee334b40d7aa880c7ab310b154fd5cd4 | cd3a4907ee334b40d7aa880c7ab310b154fd5cd4 |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 2.6.33 < 4.9.311 | 4.9.311 |
| linux | linux_kernel | >= 4.10 < 4.14.276 | 4.14.276 |
| linux | linux_kernel | >= 4.15 < 4.19.238 | 4.19.238 |
| linux | linux_kernel | >= 4.20 < 5.4.189 | 5.4.189 |
| linux | linux_kernel | >= 5.11 < 5.15.33 | 5.15.33 |
| linux | linux_kernel | >= 5.16 < 5.16.19 | 5.16.19 |
| linux | linux_kernel | >= 5.17 < 5.17.2 | 5.17.2 |
| linux | linux_kernel | >= 5.5 < 5.10.110 | 5.10.110 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q3x4-7j6p-fj5f: In the Linux kernel, the following vulnerability has been resolved:
mxser: fix xmit_buf leak in activate when LSR == 0xff
When LSR is 0xff in ->acti
ghsa_unreviewed·2025-09-23
CVE-2022-49191 [MEDIUM] CWE-401 GHSA-q3x4-7j6p-fj5f: In the Linux kernel, the following vulnerability has been resolved:
mxser: fix xmit_buf leak in activate when LSR == 0xff
When LSR is 0xff in ->acti
In the Linux kernel, the following vulnerability has been resolved:
mxser: fix xmit_buf leak in activate when LSR == 0xff
When LSR is 0xff in ->activate() (rather unlike), we return an error.
Provided ->shutdown() is not called when ->activate() fails, nothing
actually frees the buffer in this case.
Fix this by properly freeing the buffer in a designated label. We jump
there also from the "!info->type" if now too.
OSV
CVE-2022-49191: In the Linux kernel, the following vulnerability has been resolved: mxser: fix xmit_buf leak in activate when LSR == 0xff When LSR is 0xff in ->activa
osv·2025-02-26·CVSS 5.5
CVE-2022-49191 [MEDIUM] CVE-2022-49191: In the Linux kernel, the following vulnerability has been resolved: mxser: fix xmit_buf leak in activate when LSR == 0xff When LSR is 0xff in ->activa
In the Linux kernel, the following vulnerability has been resolved: mxser: fix xmit_buf leak in activate when LSR == 0xff When LSR is 0xff in ->activate() (rather unlike), we return an error. Provided ->shutdown() is not called when ->activate() fails, nothing actually frees the buffer in this case. Fix this by properly freeing the buffer in a designated label. We jump there also from the "!info->type" if now too.
Red Hat
kernel: mxser: fix xmit_buf leak in activate when LSR == 0xff
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49191 [MEDIUM] kernel: mxser: fix xmit_buf leak in activate when LSR == 0xff
kernel: mxser: fix xmit_buf leak in activate when LSR == 0xff
In the Linux kernel, the following vulnerability has been resolved:
mxser: fix xmit_buf leak in activate when LSR == 0xff
When LSR is 0xff in ->activate() (rather unlike), we return an error.
Provided ->shutdown() is not called when ->activate() fails, nothing
actually frees the buffer in this case.
Fix this by properly freeing the buffer in a designated label. We jump
there also from the "!info->type" if now too.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package:
Debian
CVE-2022-49191: linux - In the Linux kernel, the following vulnerability has been resolved: mxser: fix ...
vendor_debian·2022·CVSS 5.5
CVE-2022-49191 [MEDIUM] CVE-2022-49191: linux - In the Linux kernel, the following vulnerability has been resolved: mxser: fix ...
In the Linux kernel, the following vulnerability has been resolved: mxser: fix xmit_buf leak in activate when LSR == 0xff When LSR is 0xff in ->activate() (rather unlike), we return an error. Provided ->shutdown() is not called when ->activate() fails, nothing actually frees the buffer in this case. Fix this by properly freeing the buffer in a designated label. We jump there also from the "!info->type" if now too.
Scope: local
bookworm: resolved (fixed in 5.17.3-1)
bullseye: resolved (fixed in 5.10.113-1)
forky: resolved (fixed in 5.17.3-1)
sid: resolved (fixed in 5.17.3-1)
trixie: resolved (fixed in 5.17.3-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9dhttps://git.kernel.org/stable/c/2cd05c38a27bee7fb42aa4d43174d68ac55dac0fhttps://git.kernel.org/stable/c/376922045009f8ea2d20a8fa3475e95b47c41690https://git.kernel.org/stable/c/685b6d16bf89595310b5d61394c9b97cc9505c7chttps://git.kernel.org/stable/c/6c9041b2f90c0eace73106f22350e1d2c98f5edchttps://git.kernel.org/stable/c/6dffc2035fbaada60ca8db59e0962e34f760370ahttps://git.kernel.org/stable/c/996291d06851a26678a0fab488b6e1f0677c0576https://git.kernel.org/stable/c/b125b08dbee3611f03f53b71471813ed4ccafcddhttps://git.kernel.org/stable/c/cd3a4907ee334b40d7aa880c7ab310b154fd5cd4
2025-02-26
Published