CVE-2022-49050

MEDIUM

Linux Kernel 5.9-5.10.111, 5.11-5.15.34, 5.16-5.17.3 - Use-After-Free in Renesas RPC-IF Platform Device Registration

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix platform-device leak in error path Make sure to free the flash platform device in the event that registration fails during probe.

References (4)

Core 4

Scores

CVSS v3 5.5
EPSS 0.0025
EPSS Percentile 15.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-401
Status published
Products (15)
linux/Kernel 5.11.0 - 5.15.35linux
linux/Kernel 5.16.0 - 5.17.4linux
linux/Kernel 5.9.0 - 5.10.112linux
Linux/Linux < 5.9
Linux/Linux 5.10.112 - 5.10.*
Linux/Linux 5.15.35 - 5.15.*
Linux/Linux 5.17.4 - 5.17.*
Linux/Linux 5.18
Linux/Linux 5.9
Linux/Linux ca7d8b980b67f133317525c4273e144116ee1ae5 - 05d1824a7fb43ab9adb1eb82404954af81d8c984
... and 5 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026