CVE-2022-49391

HIGH EPSS 13.6%
Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mtk_scp: Fix a potential double free 'scp->rproc' is allocated using devm_rproc_alloc(), so there is no need to free it explicitly in the remove function.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
13.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-415

Affected Products 1

VendorProductVersionRange
linuxlinux_kernel*≥5.18  –  <5.18.4

References 2

  • git.kernel.org https://git.kernel.org/stable/c/adc02700236613b344a947a897fc2741d52a43b9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eac3e5b1c12f85732e60f5f8b985444d273866bb
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/adc02700236613b344a947a897fc2741d52a43b9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eac3e5b1c12f85732e60f5f8b985444d273866bb
    Patch