CVE-2022-49821
published 2025-05-01CVE-2022-49821: In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_dsp_element_register() Afer commit 1fa5ae857bb1…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_dsp_element_register()
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
use put_device() to give up the reference, so that the name can be
freed in kobject_cleanup() when the refcount is 0.
The 'entry' is going to be freed in mISDN_dsp_dev_release(), so the
kfree() is removed. list_del() is called in mISDN_dsp_dev_release(),
so it need be initialized.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.10-1 (bookworm) | linux 6.0.10-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < bbd53d05c4c892080ef3b617eff4f57903acecb9 | bbd53d05c4c892080ef3b617eff4f57903acecb9 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < b119bedbefb7dd9ed8bf8cb9f1056504250d610e | b119bedbefb7dd9ed8bf8cb9f1056504250d610e |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 727ed7d28348c026c7ef4d852f3d0e5054d376e8 | 727ed7d28348c026c7ef4d852f3d0e5054d376e8 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 0f2c681900a01e3f23789bca26d88268c3d5b51d | 0f2c681900a01e3f23789bca26d88268c3d5b51d |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 083a2c9ef82e184bdf0b9f9a1e5fc38d32afbb47 | 083a2c9ef82e184bdf0b9f9a1e5fc38d32afbb47 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 7a05e3929668c8cfef495c69752a9e91fac4878f | 7a05e3929668c8cfef495c69752a9e91fac4878f |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < d4b8394725079670be309f9a35ad88a8cbbaaefd | d4b8394725079670be309f9a35ad88a8cbbaaefd |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 98a2ac1ca8fd6eca6867726fe238d06e75eb1acd | 98a2ac1ca8fd6eca6867726fe238d06e75eb1acd |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 2.6.30 < 4.9.334 | 4.9.334 |
| linux | linux_kernel | >= 4.10 < 4.14.300 | 4.14.300 |
| linux | linux_kernel | >= 4.15 < 4.19.267 | 4.19.267 |
| linux | linux_kernel | >= 4.20 < 5.4.225 | 5.4.225 |
| linux | linux_kernel | >= 5.11 < 5.15.80 | 5.15.80 |
| linux | linux_kernel | >= 5.16 < 6.0.10 | 6.0.10 |
| linux | linux_kernel | >= 5.5 < 5.10.156 | 5.10.156 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w642-f79m-mr3c: In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_dsp_element_register()
Afer commit 1fa5
ghsa_unreviewed·2025-05-01
CVE-2022-49821 [MEDIUM] CWE-401 GHSA-w642-f79m-mr3c: In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_dsp_element_register()
Afer commit 1fa5
In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_dsp_element_register()
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
use put_device() to give up the reference, so that the name can be
freed in kobject_cleanup() when the refcount is 0.
The 'entry' is going to be freed in mISDN_dsp_dev_release(), so the
kfree() is removed. list_del() is called in mISDN_dsp_dev_release(),
so it need be initialized.
OSV
CVE-2022-49821: In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_dsp_element_register() Afer commit 1fa5ae
osv·2025-05-01·CVSS 5.5
CVE-2022-49821 [MEDIUM] CVE-2022-49821: In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_dsp_element_register() Afer commit 1fa5ae
In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_dsp_element_register() Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, use put_device() to give up the reference, so that the name can be freed in kobject_cleanup() when the refcount is 0. The 'entry' is going to be freed in mISDN_dsp_dev_release(), so the kfree() is removed. list_del() is called in mISDN_dsp_dev_release(), so it need be initialized.
Red Hat
kernel: mISDN: fix possible memory leak in mISDN_dsp_element_register()
vendor_redhat·2025-05-01·CVSS 5.5
CVE-2022-49821 [MEDIUM] kernel: mISDN: fix possible memory leak in mISDN_dsp_element_register()
kernel: mISDN: fix possible memory leak in mISDN_dsp_element_register()
In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_dsp_element_register()
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
use put_device() to give up the reference, so that the name can be
freed in kobject_cleanup() when the refcount is 0.
The 'entry' is going to be freed in mISDN_dsp_dev_release(), so the
kfree() is removed. list_del() is called in mISDN_dsp_dev_release(),
so it need be initialized.
Statement: This issue in mISDN_dsp_element_register() results in a memory leak if device registration fails, due to improper reference handling. It can only be triggered by a pr
Debian
CVE-2022-49821: linux - In the Linux kernel, the following vulnerability has been resolved: mISDN: fix ...
vendor_debian·2022·CVSS 5.5
CVE-2022-49821 [MEDIUM] CVE-2022-49821: linux - In the Linux kernel, the following vulnerability has been resolved: mISDN: fix ...
In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_dsp_element_register() Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, use put_device() to give up the reference, so that the name can be freed in kobject_cleanup() when the refcount is 0. The 'entry' is going to be freed in mISDN_dsp_dev_release(), so the kfree() is removed. list_del() is called in mISDN_dsp_dev_release(), so it need be initialized.
Scope: local
bookworm: resolved (fixed in 6.0.10-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.10-1)
sid: resolved (fixed in 6.0.10-1)
trixie: resolved (fixed in 6.0.10-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/083a2c9ef82e184bdf0b9f9a1e5fc38d32afbb47https://git.kernel.org/stable/c/0f2c681900a01e3f23789bca26d88268c3d5b51dhttps://git.kernel.org/stable/c/727ed7d28348c026c7ef4d852f3d0e5054d376e8https://git.kernel.org/stable/c/7a05e3929668c8cfef495c69752a9e91fac4878fhttps://git.kernel.org/stable/c/98a2ac1ca8fd6eca6867726fe238d06e75eb1acdhttps://git.kernel.org/stable/c/b119bedbefb7dd9ed8bf8cb9f1056504250d610ehttps://git.kernel.org/stable/c/bbd53d05c4c892080ef3b617eff4f57903acecb9https://git.kernel.org/stable/c/d4b8394725079670be309f9a35ad88a8cbbaaefd
2025-05-01
Published