CVE-2022-49461

amt: fix memory leak for advertisement message

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

amt: fix memory leak for advertisement message

When a gateway receives an advertisement message, it extracts relay information and then it should be freed. But the advertisement handler doesn't free it. So, memory leak would occur.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	cbc21dc1cfe949e37b2a54c71511579f1899e8d4 to before 19bb2d57eac86a368839a92117d8a10ab7183623Affected cbc21dc1cfe949e37b2a54c71511579f1899e8d4 to before e7322da399fb86a2072f008b56f7160afa1b2051Affected cbc21dc1cfe949e37b2a54c71511579f1899e8d4 to before fe29794c3585d039fefebaa2b5a4932a627ad4fdAffected
LinuxLinux	5.16Affected before 5.16Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.