Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Feb 26, 2025· Updated Oct 1, 2025

net: sfp: fix memory leak in sfp_probe()

CVE-2022-49619

Description

In the Linux kernel, the following vulnerability has been resolved:

net: sfp: fix memory leak in sfp_probe()

sfp_probe() allocates a memory chunk from sfp with sfp_alloc(). When devm_add_action() fails, sfp is not freed, which leads to a memory leak.

We should use devm_add_action_or_reset() instead of devm_add_action().

Affected products

10

Linux/Linux Kernel Rtllm-fuzzy
osv-coords8 versions
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_67&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5
< 4.12.14-122.255.1+ 7 more
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 1-8.5.1
Linux/Linuxcpe-rescue
Range: 4.14

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.