CVE-2022-49757
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 27, 2025
Updated: Apr 15, 2025
CWE ID 401
Summary
CVE-2022-49757 is a recently identified vulnerability affecting the Linux kernel. The issue lies in the EDAC/highbank subsystem where a memory leak occurs in the function highbank_mc_probe(). When devres_open_group() fails during the probing process, it does not free the memory allocated by edac_mc_alloc(). This oversight results in a memory leak. To mitigate this issue, developers are advised to call edac_mc_free() on the error handling path to prevent potential memory leaks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.