CVE-2022-49757

EDAC/highbank: Fix memory leak in highbank_mc_probe()

State: Published
Severity: 5.5 Medium
Published: Mar 27, 2025
Updated: May 11, 2026
Reserved: Mar 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

EDAC/highbank: Fix memory leak in highbank_mc_probe()

When devres_open_group() fails, it returns -ENOMEM without freeing memory allocated by edac_mc_alloc().

Call edac_mc_free() on the error handling path to avoid a memory leak.

[ bp: Massage commit message. ]

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	a1b01edb274518c7da6d69b84e7558c092282aad to before f1b3e23ed8df87d779ee86ac37f379e79a24169aAffected a1b01edb274518c7da6d69b84e7558c092282aad to before 0db40e23b56d217eebd385bebb64057ef764b2c7Affected a1b01edb274518c7da6d69b84e7558c092282aad to before 8d23f5d25264beb223ee79cdb530b88c237719fcAffected a1b01edb274518c7da6d69b84e7558c092282aad to before 329fbd260352a7b9a83781d8b8bd96f95844a51fAffected a1b01edb274518c7da6d69b84e7558c092282aad to before caffa7fed1397d1395052272c93900176de86557Affected a1b01edb274518c7da6d69b84e7558c092282aad to before b7863ef8a8f0fee96b4eb41211f4918c0e047253Affected a1b01edb274518c7da6d69b84e7558c092282aad to before e7a293658c20a7945014570e1921bf7d25d68a36Affected
LinuxLinux	3.6Affected before 3.6Not affected 4.14.305 through 4.14.Not affected 4.19.272 through 4.19.Not affected 5.4.231 through 5.4.Not affected 5.10.166 through 5.10.Not affected 5.15.91 through 5.15.Not affected 6.1.9 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

a1b01edb274518c7da6d69b84e7558c092282aad to before f1b3e23ed8df87d779ee86ac37f379e79a24169aAffected
a1b01edb274518c7da6d69b84e7558c092282aad to before 0db40e23b56d217eebd385bebb64057ef764b2c7Affected
a1b01edb274518c7da6d69b84e7558c092282aad to before 8d23f5d25264beb223ee79cdb530b88c237719fcAffected
a1b01edb274518c7da6d69b84e7558c092282aad to before 329fbd260352a7b9a83781d8b8bd96f95844a51fAffected
a1b01edb274518c7da6d69b84e7558c092282aad to before caffa7fed1397d1395052272c93900176de86557Affected
a1b01edb274518c7da6d69b84e7558c092282aad to before b7863ef8a8f0fee96b4eb41211f4918c0e047253Affected
a1b01edb274518c7da6d69b84e7558c092282aad to before e7a293658c20a7945014570e1921bf7d25d68a36Affected

LinuxLinux

3.6Affected
before 3.6Not affected
4.14.305 through 4.14.*Not affected
4.19.272 through 4.19.*Not affected
5.4.231 through 5.4.*Not affected
5.10.166 through 5.10.*Not affected
5.15.91 through 5.15.*Not affected
6.1.9 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.