CVE-2022-49502

media: rga: fix possible memory leak in rga_probe

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: rga: fix possible memory leak in rga_probe

rga->m2m_dev needs to be freed when rga_probe fails.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	f7e7b48e6d796da85d99b318def20d9313ef61df to before 8ddc89437ccefa18279918c19a61fd81527f40b9Affected f7e7b48e6d796da85d99b318def20d9313ef61df to before eeb4819e94aa69767b9e5591e70c63e8b7c5786aAffected f7e7b48e6d796da85d99b318def20d9313ef61df to before b7bbca4d08471bc8404a946bab1aa017dd05199bAffected f7e7b48e6d796da85d99b318def20d9313ef61df to before 1cdc768468c25d6b10ab83ec1efd4a8554532d69Affected f7e7b48e6d796da85d99b318def20d9313ef61df to before a71eb6025305192e646040cd76ccacb5bd48a1b5Affected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

f7e7b48e6d796da85d99b318def20d9313ef61df to before 8ddc89437ccefa18279918c19a61fd81527f40b9Affected
f7e7b48e6d796da85d99b318def20d9313ef61df to before eeb4819e94aa69767b9e5591e70c63e8b7c5786aAffected
f7e7b48e6d796da85d99b318def20d9313ef61df to before b7bbca4d08471bc8404a946bab1aa017dd05199bAffected
f7e7b48e6d796da85d99b318def20d9313ef61df to before 1cdc768468c25d6b10ab83ec1efd4a8554532d69Affected
f7e7b48e6d796da85d99b318def20d9313ef61df to before a71eb6025305192e646040cd76ccacb5bd48a1b5Affected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.