CVE-2022-49818

mISDN: fix misuse of put_device() in mISDN_register_device()

MEDIUM

5.5

CVSS Score

Published: May 1, 2025 at 02:09 PM UTC

Updated: June 17, 2026 at 05:19 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: mISDN: fix misuse of put_device() in mISDN_register_device() We should not release reference by put_device() before calling device_initialize().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.14.299 ≤ v < 4.14.3004.19.265 ≤ v < 4.19.2674.9.333 ≤ v < 4.9.3345.10.154 ≤ v < 5.10.1565.15.78 ≤ v < 5.15.805.4.224 ≤ v < 5.4.2256.0.8 ≤ v < 6.0.100d4e91efcaee081e919b3c50e875ecbb84290e4129d5b7688a2f3a86f2a3be5a6ba9cc968c80e412ff6b669523d3b3d253a044fa9636a67d06949954.14.299 4.19.265 4.9.333 5.10.154 5.15.78 5.4.224 6.0.8 6.1 rc4 6.1 rc580aabfb29b2ee9cbb8894a1d39651943d3773ea636fc5a7cabd05699b5692ad838c2c7a3abec7bd1d1aede313eb2b9a84afd60ff6cfb7c33631e0ee77d213843e67b4373285712699b692f9c743f61e7d1d4d9ac0dfa40be4c2c8abd0731659869b297

Vendor states this is fixed in 2d25107e111a85c56f601a5470f1780ec054e6ac (fixed)

Vendor states this is fixed in 44658d65f6b3118f595a1229d7eed74845a5e2ac (fixed)

Vendor states this is fixed in 596230471da3415e92ae6b9d2a4e26f4a81cac5a (fixed)

Vendor states this is fixed in 709aa1f73d3e9e9ea16e2c4e44f2874c5d2c382c (fixed)

Vendor states this is fixed in 81db4f182744acd004f17d7cc52dde9ea53467e6 (fixed)

Vendor states this is fixed in 83672c1b83d107b0d4fe0accf1bf64d8988398e6 (fixed)

Vendor states this is fixed in 87b336aa158201dc30a318431e63e8c5b26c4156 (fixed)

Vendor states this is fixed in d40b35a7922f4df3767ad6fb8ef3dc86e31d7ba3 (fixed)

Affected range stops below 4.14.300, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.267, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.334, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.156, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.80, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.225, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.0.10, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references