cbcvebase.
CVE-2022-49860
published 2025-05-01

CVE-2022-49860: In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix memory leak when register device fail If device_register()…

PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.5th percentile
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix memory leak when register device fail If device_register() fails, it should call put_device() to give up reference, the name allocated in dev_set_name() can be freed in callback function kobject_cleanup().

Affected

11 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.0.10-1 (bookworm)linux 6.0.10-1 (bookworm)
linuxlinux
linuxlinux>= 5b65781d06ea90ef2f8e51a13352c43c3daa8cdc < 1dd27541aa2b95bde71bddd43d73f9c16d73272c1dd27541aa2b95bde71bddd43d73f9c16d73272c
linuxlinux>= 5b65781d06ea90ef2f8e51a13352c43c3daa8cdc < 025eab5189fc7ee223ae9b4bc49d7df196543e53025eab5189fc7ee223ae9b4bc49d7df196543e53
linuxlinux>= 5b65781d06ea90ef2f8e51a13352c43c3daa8cdc < ac2b9f34f02052709aea7b34bb2a165e1853eb41ac2b9f34f02052709aea7b34bb2a165e1853eb41
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.0.10-16.0.10-1
linuxlinux_kernel>= 0 < 6.0.10-16.0.10-1
linuxlinux_kernel>= 0 < 6.0.10-16.0.10-1
linuxlinux_kernel>= 5.11 < 5.15.795.15.79
linuxlinux_kernel>= 5.16 < 6.0.96.0.9

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.