CVE-2022-49953

MEDIUM

Linux Kernel 5.16-5.19.7 - Resource Leak in cm3605_probe Error Handling

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: cm3605: Fix an error handling path in cm3605_probe() The commit in Fixes also introduced a new error handling path which should goto the existing error handling path. Otherwise some resources leak.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/3f7f49d8135cfe137c81316af64678f4dca1b82b

Patch

https://git.kernel.org/stable/c/160905549e663019e26395ed9d66c24ee2cf5187

Scores

CVSS v3 5.5

EPSS 0.0018

EPSS Percentile 7.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (9)

linux/Kernel 5.16.0 - 5.19.8linux

Linux/Linux < 5.16

Linux/Linux 0d31d91e614505803a0788b92f9f1a83178d8a9a - 160905549e663019e26395ed9d66c24ee2cf5187

Linux/Linux 0d31d91e614505803a0788b92f9f1a83178d8a9a - 3f7f49d8135cfe137c81316af64678f4dca1b82b

Linux/Linux 5.16

Linux/Linux 5.19.8 - 5.19.*

Linux/Linux 6.0

linux/linux_kernel 6.0 rc1 (3 CPE variants)

linux/linux_kernel 5.16 - 5.19.8

Published Jun 18, 2025

Tracked Since Feb 18, 2026