Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavf_init_module() The iavf_init_module() won't destroy workqueue when pci_register_driver() failed. Call destroy_workqueue() when pci_register_driver() failed to prevent the resource leak. Similar to the handling of u132_hcd_init in commit f276e002793c ("usb: u132-hcd: fix resource leak")
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.6, < 5.10.158 |
References
- https://git.kernel.org/stable/c/0d9f5bd54b913018031c5b964fc1f9a31f5f6cb5Patch
- https://git.kernel.org/stable/c/227d8d2f7f2278b8468c5531b0cd0f2a905b4486Patch
- https://git.kernel.org/stable/c/971c55f0763b480e63ceb7a22beb19be2509e5edPatch
- https://git.kernel.org/stable/c/bd477b891a4fa084561234eed4afacb3001dd359Patch
FAQ
What is CVE-2022-49027?
CVE-2022-49027 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavf_init_module() The iavf_init_module() won't destroy workqueue when pci_register_driver() failed. C...
How severe is CVE-2022-49027?
CVE-2022-49027 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-49027?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.