CVE-2022-49027

Summary

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix error handling in iavf_init_module()

The iavf_init_module() won't destroy workqueue when pci_register_driver() failed. Call destroy_workqueue() when pci_register_driver() failed to prevent the resource leak.

Similar to the handling of u132_hcd_init in commit f276e002793c ("usb: u132-hcd: fix resource leak")

Affected Software

VendorProductVersion RangeStatus
LinuxLinux2803b16c10ea7eec170c485388f5f26ae30e92fe < 971c55f0763b480e63ceb7a22beb19be2509e5edaffected
LinuxLinux2803b16c10ea7eec170c485388f5f26ae30e92fe < 0d9f5bd54b913018031c5b964fc1f9a31f5f6cb5affected
LinuxLinux2803b16c10ea7eec170c485388f5f26ae30e92fe < bd477b891a4fa084561234eed4afacb3001dd359affected
LinuxLinux2803b16c10ea7eec170c485388f5f26ae30e92fe < 227d8d2f7f2278b8468c5531b0cd0f2a905b4486affected
LinuxLinux4.6affected
LinuxLinux0 < 4.6unaffected
LinuxLinux5.10.158 <= 5.10.*unaffected
LinuxLinux5.15.82 <= 5.15.*unaffected
LinuxLinux6.0.12 <= 6.0.*unaffected
LinuxLinux6.1 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References