CVE-2022-49191: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: mxser: fix xmit_buf leak in activate when LSR == 0xff When LSR is 0xff in ->activate() (rather unlike), we return an error. Provided ->shutdown() is not called when ->activate() fails, nothing actually frees the buffer in this case. Fix this by properly freeing the buffer in a designated label. We jump there also from the "!info->type" if now too.

Affected products

• Linux Linux Kernel: from 2.6.33, before 4.9.311 (fixed in 4.9.311); from 4.10, before 4.14.276 (fixed in 4.14.276); from 4.15, before 4.19.238 (fixed in 4.19.238); from 4.20, before 5.4.189 (fixed in 5.4.189); from 5.5, before 5.10.110 (fixed in 5.10.110); from 5.11, before 5.15.33 (fixed in 5.15.33); …

Published 2025-02-26. Last modified 2026-06-17.