CVE-2022-49024

medium

Description

In the Linux kernel, the following vulnerability has been resolved: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods In m_can_pci_remove() and error handling path of m_can_pci_probe(), m_can_class_free_dev() should be called to free resource allocated by m_can_class_allocate_dev(), otherwise there will be memleak.

References

https://git.kernel.org/stable/c/ea8dc27bb044e19868155e500ce397007be98656

https://git.kernel.org/stable/c/1eca1d4cc21b6d0fc5f9a390339804c0afce9439

https://git.kernel.org/stable/c/0bbb88651ef6b7fbb1bf75ec7ba69add632e834b

Details

Source: Mitre, NVD

Published: 2024-10-21

Updated: 2024-10-24

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium