CVE-2022-49854

mctp: Fix an error handling path in mctp_init()

State: Published
Severity: 5.5 Medium
Published: May 1, 2025
Updated: May 11, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mctp: Fix an error handling path in mctp_init()

If mctp_neigh_init() return error, the routes resources should be released in the error handling path. Otherwise some resources leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4d8b9319282ae84f5a17b28d8b5b5d1e7e537312 to before 49d8a6e24a3496d86e8d8ae748375df984fb6d6fAffected 4d8b9319282ae84f5a17b28d8b5b5d1e7e537312 to before 216c83222d2eb24b0e63df56e8740b02c33286e8Affected 4d8b9319282ae84f5a17b28d8b5b5d1e7e537312 to before d4072058af4fd8fb4658e7452289042a406a9398Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.79 through 5.15.Not affected 6.0.9 through 6.0.Not affected 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.