Back
CVE-2022-49331
nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
Medium5.5EPSS 0.27%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling Error paths do not free previously allocated memory. Add devm_kfree() to those failure paths.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.27% · top 80% of all CVEs (4 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < 593773088d615a46a42c97e01a0550d192bb7f74
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < d221ce54ce331c1a23be71eebf57f6a088632383
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < 6fce324b530dd74750ad870699e33eeed1029ded
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < 3eca2c42daa4659965db6817479027cbc6df7899
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < 54423649bc0ed464b75807a7cf2857a5871f738f
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < f444ecd3f57f4ba5090fe8b6756933e37de4226e
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < db836b97464d44340b568e041fd24602858713f7
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < 55904086041ba4ee4070187b36590f8f8d6df4cd
- affected 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074 – < 996419e0594abb311fb958553809f24f38e7abbe
- affected 4.0
- unaffected < 4.0
- unaffected 4.9.318 – ≤ 4.9.*
- unaffected 4.14.283 – ≤ 4.14.*
- unaffected 4.19.247 – ≤ 4.19.*
- unaffected 5.4.198 – ≤ 5.4.*
- unaffected 5.10.122 – ≤ 5.10.*
- unaffected 5.15.47 – ≤ 5.15.*
- unaffected 5.17.15 – ≤ 5.17.*
- unaffected 5.18.4 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References (9)
- https://git.kernel.org/stable/c/593773088d615a46a42c97e01a0550d192bb7f74 (opens in a new tab)
- https://git.kernel.org/stable/c/d221ce54ce331c1a23be71eebf57f6a088632383 (opens in a new tab)
- https://git.kernel.org/stable/c/6fce324b530dd74750ad870699e33eeed1029ded (opens in a new tab)
- https://git.kernel.org/stable/c/3eca2c42daa4659965db6817479027cbc6df7899 (opens in a new tab)
- https://git.kernel.org/stable/c/54423649bc0ed464b75807a7cf2857a5871f738f (opens in a new tab)
- https://git.kernel.org/stable/c/f444ecd3f57f4ba5090fe8b6756933e37de4226e (opens in a new tab)
- https://git.kernel.org/stable/c/db836b97464d44340b568e041fd24602858713f7 (opens in a new tab)
- https://git.kernel.org/stable/c/55904086041ba4ee4070187b36590f8f8d6df4cd (opens in a new tab)
- https://git.kernel.org/stable/c/996419e0594abb311fb958553809f24f38e7abbe (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49331)Record last updated .