PT-2025-18632
CVE-2022-49915
·
Published
2025-05-01
·
Updated
2025-07-10
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A possible memory leak in the mISDN register device() function has been fixed. The issue occurred after a commit where the device name is allocated dynamically. To resolve this, put device() was added to give up the reference, allowing the name to be freed when the refcount is 0. The device class is set before put device() to avoid a null release() function WARN message in device release().
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾