CVE-2022-49024: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods
In the Linux kernel, the following vulnerability has been resolved:
can: mcan: pci: add missing mcanclassfreedev() in probe/remove methods
In mcanpciremove() and error handling path of mcanpciprobe(), mcanclassfreedev() should be called to free resource allocated by mcanclassallocatedev(), otherwise there will be memleak.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49024?
CVE-2022-49024 is classified with a low severity as it involves a resource management issue in the Linux kernel.
How can I fix CVE-2022-49024?
To resolve CVE-2022-49024, upgrade to a patched version of the Linux kernel that includes the fix for this vulnerability.
What versions of the Linux kernel are affected by CVE-2022-49024?
CVE-2022-49024 affects Linux kernel versions between 5.11 and 5.15.82, as well as several version 6.1 release candidates.
What components are impacted by CVE-2022-49024?
CVE-2022-49024 specifically affects the m_can PCI component within the Linux kernel.
Is CVE-2022-49024 a remote exploitation vulnerability?
No, CVE-2022-49024 is not classified as a remote exploitation vulnerability.