CVE-2022-49619: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: sfp: fix memory leak in sfp_probe() sfp_probe() allocates a memory chunk from sfp with sfp_alloc(). When devm_add_action() fails, sfp is not freed, which leads to a memory leak. We should use devm_add_action_or_reset() instead of devm_add_action().

Affected products

• Linux Linux Kernel: before 4.14.289 (fixed in 4.14.289); from 4.15, before 4.19.253 (fixed in 4.19.253); from 4.20, before 5.4.207 (fixed in 5.4.207); from 5.5, before 5.10.132 (fixed in 5.10.132); from 5.11, before 5.15.56 (fixed in 5.15.56); from 5.16, before 5.18.13 (fixed in 5.18.13); …

Published 2025-02-26. Last modified 2026-06-17.