CVE-2022-49949

firmware_loader: Fix memory leak in firmware upload

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

firmware_loader: Fix memory leak in firmware upload

In the case of firmware-upload, an instance of struct fw_upload is

allocated in firmware_upload_register(). This data needs to be freed

in fw_dev_release(). Create a new fw_upload_free() function in

sysfs_upload.c to handle the firmware-upload specific memory frees

and incorporate the missing kfree call for the fw_upload structure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.2th percentile
Published
2025-06-18T11:00Z
EPSS history
Timeline
  • 18 JUN 11:00Z
    firmware_loader: Fix memory leak in firmware upload
    cvelistv5