Vulnerability Details CVE-2022-49818
In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix misuse of put_device() in mISDN_register_device()
We should not release reference by put_device() before calling device_initialize().
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 5.5%
CVSS Severity
CVSS v3 Score 5.5
References
- https://git.kernel.org/stable/c/2d25107e111a85c56f601a5470f1780ec054e6ac
- https://git.kernel.org/stable/c/44658d65f6b3118f595a1229d7eed74845a5e2ac
- https://git.kernel.org/stable/c/596230471da3415e92ae6b9d2a4e26f4a81cac5a
- https://git.kernel.org/stable/c/709aa1f73d3e9e9ea16e2c4e44f2874c5d2c382c
- https://git.kernel.org/stable/c/81db4f182744acd004f17d7cc52dde9ea53467e6
- https://git.kernel.org/stable/c/83672c1b83d107b0d4fe0accf1bf64d8988398e6
- https://git.kernel.org/stable/c/87b336aa158201dc30a318431e63e8c5b26c4156
- https://git.kernel.org/stable/c/d40b35a7922f4df3767ad6fb8ef3dc86e31d7ba3
Products affected by CVE-2022-49818
-
cpe:2.3:o:linux:linux_kernel:4.14.299
-
cpe:2.3:o:linux:linux_kernel:4.19.265
-
cpe:2.3:o:linux:linux_kernel:4.19.266
-
cpe:2.3:o:linux:linux_kernel:4.9.333
-
cpe:2.3:o:linux:linux_kernel:5.10.154
-
cpe:2.3:o:linux:linux_kernel:5.10.155
-
cpe:2.3:o:linux:linux_kernel:5.15.78
-
cpe:2.3:o:linux:linux_kernel:5.15.79
-
cpe:2.3:o:linux:linux_kernel:5.4.224
-
cpe:2.3:o:linux:linux_kernel:6.0.8
-
cpe:2.3:o:linux:linux_kernel:6.0.9
-
cpe:2.3:o:linux:linux_kernel:6.1