What’s Vulnerable › Vulnerabilities

CVE-2022-49724: tty: goldfish: Fix free_irq() on remove

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Fix free_irq() on remove Pass the correct dev_id to free_irq() to fix this splat when the driver is unbound: WARNING: CPU: 0 PID: 30 at kernel/irq/manage.c:1895 free_irq Trying to free already-free IRQ 65 Call Trace: warn_slowpath_fmt free_irq goldfish_tty_remove platform_remove device_remove device_release_driver_internal device_driver_detach unbind_store drv_attr_store ...

Affected products

• Linux kernel: from 4.6 before 4.14.285; from 4.15 before 4.19.249; from 4.20 before 5.4.200; from 5.5 before 5.10.124; from 5.11 before 5.15.49; from 5.16 before 5.18.6 — fixed in 4.14.285, 4.19.249, 5.10.124, 5.15.49, 5.18.6, 5.4.200

How to fix

Upgrade to a fixed version: Linux kernel 4.14.285, 4.19.249, 5.10.124, 5.15.49. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/499e13aac6c762e1e828172b0f0f5275651d6512
• https://git.kernel.org/stable/c/65ca4db68b6819244df9024aea4be55edf8af1ef
• https://git.kernel.org/stable/c/a6fcd7ffd76a9c1d998a2d02d518c78a55c5bed8
• https://git.kernel.org/stable/c/c4b0b8edccb0cfb15a8cecf4161e0571d3daac64
• https://git.kernel.org/stable/c/c83a1d40dc624070a203eb383ef9fb60eb634136
• https://git.kernel.org/stable/c/f7183c76d500324b8b5bd0af5e663cfa57b7b836
• https://git.kernel.org/stable/c/fb15e79cacddfbc62264e6e807bde50ad688e988

Get alerted when CVE-2022-49724 or the next vulnerability affects your stack