CVE-2022-49331
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 13, 2025
CWE ID 401
Summary
CVE-2022-49331 is a vulnerability affecting the Linux kernel's nfc (Near Field Communication) subsystem, specifically the st21nfca driver. The issue involves memory leaks in the EVT_TRANSACTION handling, where error paths do not free previously allocated memory. This oversight could result in excessive memory usage and potential system instability. The vulnerability has since been addressed by adding devm_kfree() to the relevant failure paths.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.