CVE-2022-49729

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 7, 2025
CWE ID 401

Summary

CVE-2022-44729 is a memory leak vulnerability affecting the Linux kernel's nfc (Near Field Communication) subsystem. Specifically, in the function nfcmrvl_play_deferred, a failure to properly unreference urb (USB Request Block) structures results in memory leakage. This issue is similar to a previously addressed vulnerability in the handling of play_deferred. To mitigate the issue, affected urbs are now placed in tx_anchor, preventing memory leaks and improving error handling.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share