Riskcovery

CVE-2022-49191

mxser: fix xmit_buf leak in activate when LSR == 0xff

State
Published
Severity
Not scored
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mxser: fix xmit_buf leak in activate when LSR == 0xff

When LSR is 0xff in ->activate() (rather unlike), we return an error. Provided ->shutdown() is not called when ->activate() fails, nothing actually frees the buffer in this case.

Fix this by properly freeing the buffer in a designated label. We jump there also from the "!info->type" if now too.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before 376922045009f8ea2d20a8fa3475e95b47c41690Affected
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before 125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9dAffected
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before 685b6d16bf89595310b5d61394c9b97cc9505c7cAffected
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before 996291d06851a26678a0fab488b6e1f0677c0576Affected
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before 2cd05c38a27bee7fb42aa4d43174d68ac55dac0fAffected
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before b125b08dbee3611f03f53b71471813ed4ccafcddAffected
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before 6c9041b2f90c0eace73106f22350e1d2c98f5edcAffected
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before 6dffc2035fbaada60ca8db59e0962e34f760370aAffected
  • 6769140d304731f0a3b177470a2adb4bacd9036b to before cd3a4907ee334b40d7aa880c7ab310b154fd5cd4Affected
LinuxLinux
  • 2.6.33Affected
  • before 2.6.33Not affected
  • 4.9.311 through 4.9.*Not affected
  • 4.14.276 through 4.14.*Not affected
  • 4.19.238 through 4.19.*Not affected
  • 5.4.189 through 5.4.*Not affected
  • 5.10.110 through 5.10.*Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.