VULNERABILITY INTELLIGENCE
CVE-2022-49178
CVSS score5.5 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-02-26
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: memstick/mspro_block: fix handling of read-only devices Use set_disk_ro to propagate the read-only state to the block layer instead of checking for it in ->open and leaking a reference in case of a read-only device.
Weakness classification
- CWE-401: Missing Release of Memory after Effective Lifetime