CVE-2022-49178CWE-401

CVE-2022-49178

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

memstick/mspro_block: fix handling of read-only devices

Use set_disk_ro to propagate the read-only state to the block layer

instead of checking for it in ->open and leaking a reference in case

of a read-only device.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2025-02-26T12:00Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel< 5.16.195.16.19
linux/linux_kernel≥ 5.17, < 5.17.25.17.2
References (3)
EPSS history
Timeline
  • 26 FEB 01:55Z
    memstick/mspro_block: fix handling of read-only devices
    cvelistv5