NetSight
IP …
medium5.5

CVE-2022-49191

In the Linux kernel, the following vulnerability has been resolved: mxser: fix xmit_buf leak in activate when LSR == 0xff When LSR is 0xff in ->activate() (rat…

Impact

In the Linux kernel, the following vulnerability has been resolved: mxser: fix xmit_buf leak in activate when LSR == 0xff When LSR is 0xff in ->activate() (rather unlike), we return an error. Provided ->shutdown() is not called when ->activate() fails, nothing actually frees the buffer in this case. Fix this by properly freeing the buffer in a designated label. We jump there also from the "!info->type" if now too.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.33 before 4.9.311
from 4.10 before 4.14.276
from 4.15 before 4.19.238
from 4.20 before 5.4.189
from 5.5 before 5.10.110
from 5.11 before 5.15.33

Weakness classification

CWE-401

References