CVE-2022-49617: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver bind/unbind tests. We already clean-up the device properties when the card is removed, this code can be moved as a helper and called upon card registration errors.

Affected products

• Linux Linux Kernel: from 5.7, before 5.15.56 (fixed in 5.15.56); from 5.16, before 5.18.13 (fixed in 5.18.13); version 5.19 only

Published 2025-02-26. Last modified 2026-06-17.