CVE-2022-49024 Information

Description

In the Linux kernel the following vulnerability has been resolved:

can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods

In m_can_pci_remove() and error handling path of m_can_pci_probe() m_can_class_free_dev() should be called to free resource allocated by m_can_class_allocate_dev() otherwise there will be memleak.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Reference

https://git.kernel.org/stable/c/ea8dc27bb044e19868155e500ce397007be98656 https://git.kernel.org/stable/c/0bbb88651ef6b7fbb1bf75ec7ba69add632e834b https://git.kernel.org/stable/c/1eca1d4cc21b6d0fc5f9a390339804c0afce9439

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

5.5