CVE-2022-49657
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
CWE ID 401
Summary
CVE-2022-49657 is a recently identified vulnerability affecting the Linux kernel. Specifically, in the usbnet driver, an error was discovered where the `usbnet_write_cmd_async()` function failed to correctly identify which buffers needed to be freed in certain error cases, resulting in a memory leak. This issue has been addressed by properly managing the affected pointers and adding a "Fixes" tag to affected versions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.