CVE-2022-49502

media: rga: fix possible memory leak in rga_probe

MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 02:13 AM UTC
Updated: June 17, 2026 at 05:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: media: rga: fix possible memory leak in rga_probe rga->m2m_dev needs to be freed when rga_probe fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.10.1214.15 ≤ v < 5.10.1214.15 ≤ v < 5.15.464.15 ≤ v < 5.17.144.15 ≤ v < 5.18.34.15 ≤ v < 5.195.11 ≤ v < 5.15.465.16 ≤ v < 5.17.145.18 ≤ v < 5.18.34.15f7e7b48e6d796da85d99b318def20d9313ef61df
Vendor states this is fixed in 1cdc768468c25d6b10ab83ec1efd4a8554532d69 (fixed)
Vendor states this is fixed in 8ddc89437ccefa18279918c19a61fd81527f40b9 (fixed)
Vendor states this is fixed in a71eb6025305192e646040cd76ccacb5bd48a1b5 (fixed)
Vendor states this is fixed in b7bbca4d08471bc8404a946bab1aa017dd05199b (fixed)
Vendor states this is fixed in eeb4819e94aa69767b9e5591e70c63e8b7c5786a (fixed)
Vendor states this is fixed in 4.15 (unaffected)
Vendor states this is fixed in 5.10.121 (unaffected)
Vendor states this is fixed in 5.15.46 (unaffected)
Vendor states this is fixed in 5.17.14 (unaffected)
Vendor states this is fixed in 5.18.3 (unaffected)
Vendor states this is fixed in 5.19 (unaffected)

References (5)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1cdc768468c25d6b10ab83ec1efd4a8554532d69
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8ddc89437ccefa18279918c19a61fd81527f40b9
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a71eb6025305192e646040cd76ccacb5bd48a1b5
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b7bbca4d08471bc8404a946bab1aa017dd05199b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/eeb4819e94aa69767b9e5591e70c63e8b7c5786a

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card