CVE-2022-49854: mctp: Fix an error handling path in mctp_init()
In the Linux kernel, the following vulnerability has been resolved:
mctp: Fix an error handling path in mctpinit()
If mctpneighinit() return error, the routes resources should be released in the error handling path. Otherwise some resources leak.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49854?
CVE-2022-49854 is classified as a moderate severity vulnerability due to the potential for resource leakage in the Linux kernel.
How do I fix CVE-2022-49854?
To fix CVE-2022-49854, update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What component of the Linux kernel is affected by CVE-2022-49854?
CVE-2022-49854 affects the MCTP (Management Component Transport Protocol) implementation in the Linux kernel.
What types of resources are leaked due to CVE-2022-49854?
CVE-2022-49854 can lead to leaked routing resources if error handling is not properly conducted during initialization.
Is CVE-2022-49854 present in all versions of the Linux kernel?
CVE-2022-49854 is not present in all versions and generally affects specific Linux kernel versions prior to the patch being applied.