CVE-2022-49422

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-02-26 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix the error handling path in idxd_cdev_register() If a call to alloc_chrdev_region() fails, the already allocated resources are leaking. Add the needed error handling path to fix the leak.

Affected Software (7)

VendorProductVersion
Linux Linux 42d279f9137ab7d5503836baec2739284b278d8f < 6073af78156b8c3fc1198f8bcc190b7ac3ac0143
Linux Linux 42d279f9137ab7d5503836baec2739284b278d8f < b3c7b5d08e9d5b2ff31c03078c00ecf11042419f
Linux Linux 42d279f9137ab7d5503836baec2739284b278d8f < 5e88561eceb34ae3f88451c2b8e30fe403484189
Linux Linux 42d279f9137ab7d5503836baec2739284b278d8f < c308a2e711a52a47f4b45e7add2b5200169e429a
Linux Linux 42d279f9137ab7d5503836baec2739284b278d8f < aab08c1aac01097815fbcf10fce7021d2396a31f
Linux Linux 5.6
linux linux_kernel 5.6 – 5.10.121

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.26%
Raw Score 0.002610
Percentile 18.0%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →