CVE-2022-49191

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mxser: fix xmit_buf leak in activate when LSR == 0xff

When LSR is 0xff in ->activate() (rather unlike), we return an error. Provided ->shutdown() is not called when ->activate() fails, nothing actually frees the buffer in this case.

Fix this by properly freeing the buffer in a designated label. We jump there also from the "!info->type" if now too.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 6769140d304731f0a3b177470a2adb4bacd9036b, < 376922045009f8ea2d20a8fa3475e95b47c41690; >= 6769140d304731f0a3b177470a2adb4bacd9036b, < 125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d; >= 6769140d304731f0a3b177470a2adb4bacd9036b, < 685b6d16bf89595310b5d61394c9b97cc9505c7c; >= 6769140d304731f0a3b177470a2adb4bacd9036b, < 996291d06851a26678a0fab488b6e1f0677c0576; >= 6769140d304731f0a3b177470a2adb4bacd9036b, < 2cd05c38a27bee7fb42aa4d43174d68ac55dac0f; >= 6769140d304731f0a3b177470a2adb4bacd9036b, < b125b08dbee3611f03f53b71471813ed4ccafcdd; >= 6769140d304731f0a3b177470a2adb4bacd9036b, < 6c9041b2f90c0eace73106f22350e1d2c98f5edc; >= 6769140d304731f0a3b177470a2adb4bacd9036b, < 6dffc2035fbaada60ca8db59e0962e34f760370a; >= 6769140d304731f0a3b177470a2adb4bacd9036b, < cd3a4907ee334b40d7aa880c7ab310b154fd5cd4
LinuxLinux2.6.33

References

Timeline

Published
Feb 26, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-491925.5In the Linux kernel, the following vulnerability has been resolved: drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set viaCVE-2022-491935.5In the Linux kernel, the following vulnerability has been resolved: ice: fix 'scheduling while atomic' on aux critical err interrupt ThereCVE-2022-491945.5In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Use stronger register read/writes to assure ordering GCCVE-2022-491955.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix panic on shutdown if multi-chip tree failed to probe DSACVE-2022-491967.8In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix use after free in remove_phb_dynamic() In remove_CVE-2022-491975.5In the Linux kernel, the following vulnerability has been resolved: af_netlink: Fix shift out of bounds in group mask calculation When a nCVE-2022-491985.5In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcp_tsorted_anchor was initialized before releaCVE-2022-491995.5In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() CVE-2022-49209.6Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UCVE-2022-492005.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt Fix the fCVE-2022-492014.7In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fix race between xmit and reset There is a race between resetCVE-2022-492025.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: add missing NULL check in h5_enqueue Syzbot hit g
CVE-2022-49191: Medium severity, CVSS 5.5 | Vulnix