CVE-2022-49619
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
CWE ID 401
Summary
CVE-2022-49619 is a memory leak vulnerability affecting the Linux kernel's net: sfp module. In the function sfp_probe(), a memory chunk is allocated using sfp_alloc() but not freed when devm_add_action() fails. This results in a memory leak. To mitigate this issue, it is recommended to utilize devm_add_action_or_reset() instead of devm_add_action() in relevant parts of the code.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.