CVE-2022-49399

tty: goldfish: Use tty_port_destroy() to destroy port

Description

In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Use tty_port_destroy() to destroy port In goldfish_tty_probe(), the port initialized through tty_port_init() should be destroyed in error paths.In goldfish_tty_remove(), qtty->port also should be destroyed or else might leak resources. Fix the above by calling tty_port_destroy().

N/A

CVSS

Severity:

EPSS 0.05%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/241fcb79dd1df276d80b19f5f6acc9eaaaa63309
https://git.kernel.org/stable/c/326192b99c903a2193d820c30ed936cc2402382c
https://git.kernel.org/stable/c/9ae3d073f7db5578ae1907544f0c15947e9678e6
https://git.kernel.org/stable/c/ee6c33b29e624f515202a31bf6ef0437f26a1867
https://git.kernel.org/stable/c/da64f419d7f78272bfe40dde1262602d4ff6b32c
https://git.kernel.org/stable/c/45f6ce70abfb7ccf9d787781cbc4c03294a775a1
https://git.kernel.org/stable/c/4639d1b992de8f37d66f698056875c274efcd45f
https://git.kernel.org/stable/c/507b05063d1b7a1fcb9f7d7c47586fc4f3508f98

Frequently Asked Questions

What is the severity of CVE-2022-49399?: CVE-2022-49399 has not yet been assigned a CVSS score.
How to fix CVE-2022-49399?: To fix CVE-2022-49399, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49399 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-49399 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49399?: CVE-2022-49399 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.