CVE-2022-49403

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

lib/string_helpers: fix not adding strarray to device's resource list

Add allocated strarray to device's resource list. This is a must to automatically release strarray when the device disappears.

Without this fix we have a memory leak in the few drivers which use devm_kasprintf_strarray().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= acdb89b6c87a2d7b5c48a82756e6f5c6f599f60a, < a152eb42fcecfe41239c3c6695342f3a128593e7; >= acdb89b6c87a2d7b5c48a82756e6f5c6f599f60a, < bf29edab0c9ff3d2633b8306a67d04c357e2a385; >= acdb89b6c87a2d7b5c48a82756e6f5c6f599f60a, < cd290a9839cee2f6641558877e707bd373c8f6f1
LinuxLinux5.17

References

Timeline

Published
Feb 26, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-494045.5In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When mCVE-2022-494055.5In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() This coCVE-2022-494065.5In the Linux kernel, the following vulnerability has been resolved: block: Fix potential deadlock in blk_ia_range_sysfs_show() When being CVE-2022-494077.1In the Linux kernel, the following vulnerability has been resolved: dlm: fix plock invalid read This patch fixes an invalid read showed byCVE-2022-494085.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in parse_apply_sb_mount_options() If processing CVE-2022-494095.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search Hulk Robot reported a BUG_ON: ===CVE-2022-49418.8The WCFM Membership plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.10 due to missingCVE-2022-494107.8In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in create_var_ref() In create_var_rCVE-2022-494117.8In the Linux kernel, the following vulnerability has been resolved: bfq: Make sure bfqg for which we are queueing requests is online Bios CVE-2022-494127.8In the Linux kernel, the following vulnerability has been resolved: bfq: Avoid merging queues with different parents It can happen that thCVE-2022-494137.8In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is CVE-2022-494144.7In the Linux kernel, the following vulnerability has been resolved: ext4: fix race condition between ext4_write and ext4_convert_inline_dat
CVE-2022-49403: Medium severity, CVSS 5.5 | Vulnix