Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: lib/string_helpers: fix not adding strarray to device's resource list Add allocated strarray to device's resource list. This is a must to automatically release strarray when the device disappears. Without this fix we have a memory leak in the few drivers which use devm_kasprintf_strarray().
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.17, < 5.17.14 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/a152eb42fcecfe41239c3c6695342f3a128593e7Patch
- https://git.kernel.org/stable/c/bf29edab0c9ff3d2633b8306a67d04c357e2a385Patch
- https://git.kernel.org/stable/c/cd290a9839cee2f6641558877e707bd373c8f6f1Patch
FAQ
What is CVE-2022-49403?
CVE-2022-49403 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: lib/string_helpers: fix not adding strarray to device's resource list Add allocated strarray to device's resource list. This is a ...
How severe is CVE-2022-49403?
CVE-2022-49403 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-49403?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.