CVE-2022-49741
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 27, 2025
Updated: Apr 14, 2025
CWE ID 401
Summary
CVE-2022-49741: A memory leak issue was identified in the Linux kernel's fbdev driver, specifically in the ufx_usb_probe function. The error handling code contains inconsistencies, such as missing calls to ufx_free_usb_list and an unmatched label. These issues result in a memory leak, leading to an unreferenced object of size 128. The kernel allocates this memory in ufx_alloc_urb_list, and the leak occurs when the probe function is called. To resolve the issue, the error handling code in ufx_usb_probe needs to be rewritten.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.