Back
CVE-2022-49653
i2c: piix4: Fix a memory leak in the EFCH MMIO support
Medium5.5EPSS 0.28%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that release_resource() merely removes the resource from the tree but does not free its memory. We need to call release_mem_region() instead, which does free the memory. As a nice side effect, this brings back some symmetry between the legacy and MMIO paths.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.28% · top 79% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 4b965566ca26e83553d92b8c57050e5d59911806 – < d2bf1a6480e8d44658a8ac3bdcec081238873212
- affected 7c148722d074c29fb998578eea5de3c14b9608c9 – < a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19
- affected 7c148722d074c29fb998578eea5de3c14b9608c9 – < 8ad59b397f86a4d8014966fdc0552095a0c4fb2b
- affected f48190bca4b1a397f2e050efea2c8e8e72049ec8
- affected 5.15.42 – < 5.15.54
- affected 5.17.10 – < 5.18
- affected 5.18
- unaffected < 5.18
- unaffected 5.15.54 – ≤ 5.15.*
- unaffected 5.18.11 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References (3)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49653)Record last updated .