CVE-2022-49115

PCI: endpoint: Fix misused goto label

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix misused goto label

Fix a misused goto label jump since that can result in a memory leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before 7c657c0694ff690e361a13ce41c36b9dfb433ec8Affected 5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before dc9d33b2d8d09e6478e8ef817a81cf26930acc3eAffected 5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before 70236a0d2d62b081d52076de22d8d017d6cbe99fAffected 5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before d3642fc64276b06446290f82fd45630aeaa4b007Affected 5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before bf8d87c076f55b8b4dfdb6bc6c6b6dc0c2ccb487Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.111 through 5.10.Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before 7c657c0694ff690e361a13ce41c36b9dfb433ec8Affected
5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before dc9d33b2d8d09e6478e8ef817a81cf26930acc3eAffected
5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before 70236a0d2d62b081d52076de22d8d017d6cbe99fAffected
5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before d3642fc64276b06446290f82fd45630aeaa4b007Affected
5ebf3fc59bd20d17df3ba26159787d13cf20d362 to before bf8d87c076f55b8b4dfdb6bc6c6b6dc0c2ccb487Affected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.111 through 5.10.*Not affected
5.15.34 through 5.15.*Not affected
5.16.20 through 5.16.*Not affected
5.17.3 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.