CVE-2022-49653

i2c: piix4: Fix a memory leak in the EFCH MMIO support

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 23, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: piix4: Fix a memory leak in the EFCH MMIO support

The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that release_resource() merely removes the resource from the tree but does not free its memory. We need to call release_mem_region() instead, which does free the memory. As a nice side effect, this brings back some symmetry between the legacy and MMIO paths.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	4b965566ca26e83553d92b8c57050e5d59911806 to before d2bf1a6480e8d44658a8ac3bdcec081238873212Affected 7c148722d074c29fb998578eea5de3c14b9608c9 to before a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19Affected 7c148722d074c29fb998578eea5de3c14b9608c9 to before 8ad59b397f86a4d8014966fdc0552095a0c4fb2bAffected f48190bca4b1a397f2e050efea2c8e8e72049ec8Affected 5.15.42 to before 5.15.54Affected 5.17.10 to before 5.18Affected
LinuxLinux	5.18Affected before 5.18Not affected 5.15.54 through 5.15.Not affected 5.18.11 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

4b965566ca26e83553d92b8c57050e5d59911806 to before d2bf1a6480e8d44658a8ac3bdcec081238873212Affected
7c148722d074c29fb998578eea5de3c14b9608c9 to before a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19Affected
7c148722d074c29fb998578eea5de3c14b9608c9 to before 8ad59b397f86a4d8014966fdc0552095a0c4fb2bAffected
f48190bca4b1a397f2e050efea2c8e8e72049ec8Affected
5.15.42 to before 5.15.54Affected
5.17.10 to before 5.18Affected

LinuxLinux

5.18Affected
before 5.18Not affected
5.15.54 through 5.15.*Not affected
5.18.11 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.