CVE-2022-49915
published 2025-05-01CVE-2022-49915: In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_register_device() Afer commit 1fa5ae857bb1…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
9.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_register_device()
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
add put_device() to give up the reference, so that the name can be
freed in kobject_cleanup() when the refcount is 0.
Set device class before put_device() to avoid null release() function
WARN message in device_release().
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.8-1 (bookworm) | linux 6.0.8-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < d1d1aede313eb2b9a84afd60ff6cfb7c33631e0e | d1d1aede313eb2b9a84afd60ff6cfb7c33631e0e |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 080aabfb29b2ee9cbb8894a1d039651943d3773e | 080aabfb29b2ee9cbb8894a1d039651943d3773e |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < a636fc5a7cabd05699b5692ad838c2c7a3abec7b | a636fc5a7cabd05699b5692ad838c2c7a3abec7b |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 2ff6b669523d3b3d253a044fa9636a67d0694995 | 2ff6b669523d3b3d253a044fa9636a67d0694995 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < e77d213843e67b4373285712699b692f9c743f61 | e77d213843e67b4373285712699b692f9c743f61 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 029d5b7688a2f3a86f2a3be5a6ba9cc968c80e41 | 029d5b7688a2f3a86f2a3be5a6ba9cc968c80e41 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 0d4e91efcaee081e919b3c50e875ecbb84290e41 | 0d4e91efcaee081e919b3c50e875ecbb84290e41 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < e7d1d4d9ac0dfa40be4c2c8abd0731659869b297 | e7d1d4d9ac0dfa40be4c2c8abd0731659869b297 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 2.6.30 < 4.9.333 | 4.9.333 |
| linux | linux_kernel | >= 4.10 < 4.14.299 | 4.14.299 |
| linux | linux_kernel | >= 4.15 < 4.19.265 | 4.19.265 |
| linux | linux_kernel | >= 4.20 < 5.4.224 | 5.4.224 |
| linux | linux_kernel | >= 5.11 < 5.15.78 | 5.15.78 |
| linux | linux_kernel | >= 5.16 < 6.0.8 | 6.0.8 |
| linux | linux_kernel | >= 5.5 < 5.10.154 | 5.10.154 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: mISDN: fix possible memory leak in mISDN_register_device()
vendor_redhat·2025-05-01·CVSS 5.5
CVE-2022-49915 [MEDIUM] kernel: mISDN: fix possible memory leak in mISDN_register_device()
kernel: mISDN: fix possible memory leak in mISDN_register_device()
In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_register_device()
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
add put_device() to give up the reference, so that the name can be
freed in kobject_cleanup() when the refcount is 0.
Set device class before put_device() to avoid null release() function
WARN message in device_release().
Statement: This bug leads to a memory leak if device registration fails, as a dynamically allocated name is not properly freed. Only a privileged user with the ability to register mISDN devices can trigger this condition. The impact is limited to
Debian
CVE-2022-49915: linux - In the Linux kernel, the following vulnerability has been resolved: mISDN: fix ...
vendor_debian·2022·CVSS 5.5
CVE-2022-49915 [MEDIUM] CVE-2022-49915: linux - In the Linux kernel, the following vulnerability has been resolved: mISDN: fix ...
In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_register_device() Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, add put_device() to give up the reference, so that the name can be freed in kobject_cleanup() when the refcount is 0. Set device class before put_device() to avoid null release() function WARN message in device_release().
Scope: local
bookworm: resolved (fixed in 6.0.8-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.8-1)
sid: resolved (fixed in 6.0.8-1)
trixie: resolved (fixed in 6.0.8-1)
GHSA
GHSA-8p4g-7vvj-g5r6: In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_register_device()
Afer commit 1fa5ae857
ghsa_unreviewed·2025-05-01
CVE-2022-49915 [MEDIUM] CWE-401 GHSA-8p4g-7vvj-g5r6: In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_register_device()
Afer commit 1fa5ae857
In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible memory leak in mISDN_register_device()
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
add put_device() to give up the reference, so that the name can be
freed in kobject_cleanup() when the refcount is 0.
Set device class before put_device() to avoid null release() function
WARN message in device_release().
OSV
CVE-2022-49915: In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_register_device() Afer commit 1fa5ae857bb
osv·2025-05-01·CVSS 5.5
CVE-2022-49915 [MEDIUM] CVE-2022-49915: In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_register_device() Afer commit 1fa5ae857bb
In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_register_device() Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, add put_device() to give up the reference, so that the name can be freed in kobject_cleanup() when the refcount is 0. Set device class before put_device() to avoid null release() function WARN message in device_release().
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/029d5b7688a2f3a86f2a3be5a6ba9cc968c80e41https://git.kernel.org/stable/c/080aabfb29b2ee9cbb8894a1d039651943d3773ehttps://git.kernel.org/stable/c/0d4e91efcaee081e919b3c50e875ecbb84290e41https://git.kernel.org/stable/c/2ff6b669523d3b3d253a044fa9636a67d0694995https://git.kernel.org/stable/c/a636fc5a7cabd05699b5692ad838c2c7a3abec7bhttps://git.kernel.org/stable/c/d1d1aede313eb2b9a84afd60ff6cfb7c33631e0ehttps://git.kernel.org/stable/c/e77d213843e67b4373285712699b692f9c743f61https://git.kernel.org/stable/c/e7d1d4d9ac0dfa40be4c2c8abd0731659869b297
2025-05-01
Published