CVE-2022-49095

Katalog CVE

CVSS 5.5 · Medium EPSS 0,26%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() The error handling path of the probe releases a resource that is not freed in the remove function. In some cases, a ioremap() must be undone. Add the missing iounmap() call in the remove function.

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/16ed828b872d12ccba8f07bcc446ae89ba662f9c patch
• https://git.kernel.org/stable/c/1e0c01319dedf1e63ec5df37ead048e17afd92ba patch
• https://git.kernel.org/stable/c/34a47f7ddb4fd1cbd12397aa6f7dad1de08b4050 patch
• https://git.kernel.org/stable/c/a845c678e094894f38cc9526d212b21933ce44c7 patch
• https://git.kernel.org/stable/c/aefd755a96051aa56b198cb7ecd168b22ba384f6 patch
• https://git.kernel.org/stable/c/c5f77b595379b5191316edd365a542f8b1526066 patch
• https://git.kernel.org/stable/c/ce430cfad6a5385d5b7f7c1dc3fa50f10abfd41b patch
• https://git.kernel.org/stable/c/db863ab2baf058ed05c7b723612e3c40c9dd6885 patch
• https://git.kernel.org/stable/c/de6aee0978f164d3d0c771ce03e3066a26c371c5 patch