What’s Vulnerable › Vulnerabilities

CVE-2022-49283: firmware: sysfb: fix platform-device leak in error path

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: sysfb: fix platform-device leak in error path Make sure to free the platform device also in the unlikely event that registration fails.

Affected products

• Linux kernel: from 5.15 before 5.15.33; from 5.16 before 5.16.19; from 5.17 before 5.17.2 — fixed in 5.15.33, 5.16.19, 5.17.2

How to fix

Upgrade to a fixed version: Linux kernel 5.15.33, 5.16.19, 5.17.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/202c08914ba50dd324e42d5ad99535a89f242560
• https://git.kernel.org/stable/c/b3e38f939ab4d0d86f56bff3362c3f88c4b2ad32
• https://git.kernel.org/stable/c/bb7fcbe80a013dc883181dc818c407d38558f76c
• https://git.kernel.org/stable/c/fed4df558b8cdb6f3beea38a7c977f118f082b0d

Get alerted when CVE-2022-49283 or the next vulnerability affects your stack