In the Linux kernel, the following vulnerability has been resolved: EDAC/highbank: Fix memory leak in highbank_mc_probe() When devres_open_group() fails, it returns -ENOMEM without freeing memory allocated by edac_mc_alloc(). Call edac_mc_free() on the error handling path to avoid a memory leak. [ bp: Massage commit message. ]

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0db40e23b56d217eebd385bebb64057ef764b2c7 cve-icon cve-icon
https://git.kernel.org/stable/c/329fbd260352a7b9a83781d8b8bd96f95844a51f cve-icon cve-icon
https://git.kernel.org/stable/c/8d23f5d25264beb223ee79cdb530b88c237719fc cve-icon cve-icon
https://git.kernel.org/stable/c/b7863ef8a8f0fee96b4eb41211f4918c0e047253 cve-icon cve-icon
https://git.kernel.org/stable/c/caffa7fed1397d1395052272c93900176de86557 cve-icon cve-icon
https://git.kernel.org/stable/c/e7a293658c20a7945014570e1921bf7d25d68a36 cve-icon cve-icon
https://git.kernel.org/stable/c/f1b3e23ed8df87d779ee86ac37f379e79a24169a cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025032702-CVE-2022-49757-a990@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49757 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49757 cve-icon
History

Wed, 01 Oct 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 15 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Wed, 09 Apr 2025 03:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

Wed, 02 Apr 2025 02:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Thu, 27 Mar 2025 17:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: EDAC/highbank: Fix memory leak in highbank_mc_probe() When devres_open_group() fails, it returns -ENOMEM without freeing memory allocated by edac_mc_alloc(). Call edac_mc_free() on the error handling path to avoid a memory leak. [ bp: Massage commit message. ]
Title EDAC/highbank: Fix memory leak in highbank_mc_probe()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-03-27T16:43:04.787Z

Updated: 2025-10-01T17:22:53.691Z

Reserved: 2025-03-27T16:39:17.989Z

Link: CVE-2022-49757

cve-icon Vulnrichment

Updated: 2025-10-01T16:59:31.722Z

cve-icon NVD

Status : Modified

Published: 2025-03-27T17:15:40.910

Modified: 2025-10-01T18:15:32.873

Link: CVE-2022-49757

cve-icon Redhat

Severity : Low

Publid Date: 2025-03-27T00:00:00Z

Links: CVE-2022-49757 - Bugzilla