PT-2025-18604

CVE-2022-49887

·

Published

2025-05-01

·

Updated

2025-07-10

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A possible refcount leak in the vdec probe() function has been resolved. The issue occurs when vdec probe fails or vdec remove is called, and v4l2 device unregister is not called to put the refcount obtained by v4l2 device register.
Recommendations To resolve the issue, ensure that v4l2 device unregister is called when vdec probe fails or vdec remove is called to properly put the refcount obtained by v4l2 device register. As a temporary workaround, consider reviewing the code to ensure that the refcount is properly handled in the vdec probe function and when vdec remove is called.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
SUSE-SU-2025:01918-1
SUSE-SU-2025:01966-1
SUSE-SU-2025:01982-1
SUSE-SU-2025_01982-1
SUSE-SU-2025:01995-1
SUSE-SU-2025:02173-1
SUSE-SU-2025_02173-1
SUSE-SU-2025:02262-1
SUSE-SU-2025_02262-1
SUSE-SU-2025:2173-1
Found an issue in the description? Have something to add? Feel free to write us 👾