Linux Kernel Vulnerability CVE-2022-49745: Probe Rollback Leak in Debian Packages
Summary
CVE-2022-49745: In the Linux kernel, the following vulnerability has been resolved: fpga: m10bmc-sec: Fix probe rollback Handle probe error rollbacks properly to avoid leaks. Affects linux versions < 6.1.11-1. Fixed in 6.1.11-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system and is known for its stability and performance. However, vulnerabilities can arise, such as CVE-2022-49745, which affects the handling of probe error rollbacks in the m10bmc-sec FPGA driver, potentially leading to resource leaks.
Vulnerability Detail
CVE-2022-49745 is a vulnerability in the Linux kernel that occurs during the probe process of the m10bmc-sec FPGA driver. When a probe error occurs, the system fails to properly handle the rollback, which can lead to resource leaks. This vulnerability can affect system stability and performance, as leaked resources may not be reclaimed, potentially leading to denial of service or other unintended behaviors.
How To Fix
Minimum fixed version
6.1.11-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been documented for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
CVE-2022-49745 is a significant vulnerability in the Linux kernel that requires immediate attention. Users are advised to update their systems to the patched version to prevent potential resource leaks and maintain system stability. Utilizing tools like Vulert can help in monitoring for such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49745 is a vulnerability in the Linux kernel related to improper handling of probe error rollbacks in the m10bmc-sec FPGA driver.
This vulnerability can lead to resource leaks, which may affect system stability and performance, potentially resulting in denial of service.
Yes, a patch is available in version 6.1.11-1 for Debian 12 and 13. It is recommended to update to this version.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While no specific workarounds are available, it is crucial to plan for an update as soon as possible to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
