{"id":"CVE-2022-49191","state":"PUBLISHED","title":"mxser: fix xmit_buf leak in activate when LSR == 0xff","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmxser: fix xmit_buf leak in activate when LSR == 0xff\n\nWhen LSR is 0xff in ->activate() (rather unlike), we return an error.\nProvided ->shutdown() is not called when ->activate() fails, nothing\nactually frees the buffer in this case.\n\nFix this by properly freeing the buffer in a designated label. We jump\nthere also from the \"!info->type\" if now too.","publishedAt":"2025-02-26T01:55:38.124Z","updatedAt":"2026-05-11T18:54:53.083Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"376922045009f8ea2d20a8fa3475e95b47c41690","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"685b6d16bf89595310b5d61394c9b97cc9505c7c","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"996291d06851a26678a0fab488b6e1f0677c0576","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"2cd05c38a27bee7fb42aa4d43174d68ac55dac0f","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"b125b08dbee3611f03f53b71471813ed4ccafcdd","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"6c9041b2f90c0eace73106f22350e1d2c98f5edc","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"6dffc2035fbaada60ca8db59e0962e34f760370a","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"cd3a4907ee334b40d7aa880c7ab310b154fd5cd4","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/tty/mxser.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.33","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.33","versionType":"semver"},{"version":"4.9.311","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.276","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.238","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.189","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.110","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.33","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.16.19","status":"unaffected","lessThanOrEqual":"5.16.*","versionType":"semver"},{"version":"5.17.2","status":"unaffected","lessThanOrEqual":"5.17.*","versionType":"semver"},{"version":"5.18","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/tty/mxser.c"]}],"references":["https://git.kernel.org/stable/c/376922045009f8ea2d20a8fa3475e95b47c41690","https://git.kernel.org/stable/c/125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d","https://git.kernel.org/stable/c/685b6d16bf89595310b5d61394c9b97cc9505c7c","https://git.kernel.org/stable/c/996291d06851a26678a0fab488b6e1f0677c0576","https://git.kernel.org/stable/c/2cd05c38a27bee7fb42aa4d43174d68ac55dac0f","https://git.kernel.org/stable/c/b125b08dbee3611f03f53b71471813ed4ccafcdd","https://git.kernel.org/stable/c/6c9041b2f90c0eace73106f22350e1d2c98f5edc","https://git.kernel.org/stable/c/6dffc2035fbaada60ca8db59e0962e34f760370a","https://git.kernel.org/stable/c/cd3a4907ee334b40d7aa880c7ab310b154fd5cd4"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/49xxx/CVE-2022-49191.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-49191","state":"PUBLISHED","datePublished":"2025-02-26T01:55:38.124Z","dateUpdated":"2026-05-11T18:54:53.083Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-02-26T01:49:39.286Z"},"containers":{"cna":{"title":"mxser: fix xmit_buf leak in activate when LSR == 0xff","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmxser: fix xmit_buf leak in activate when LSR == 0xff\n\nWhen LSR is 0xff in ->activate() (rather unlike), we return an error.\nProvided ->shutdown() is not called when ->activate() fails, nothing\nactually frees the buffer in this case.\n\nFix this by properly freeing the buffer in a designated label. We jump\nthere also from the \"!info->type\" if now too."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"376922045009f8ea2d20a8fa3475e95b47c41690","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"685b6d16bf89595310b5d61394c9b97cc9505c7c","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"996291d06851a26678a0fab488b6e1f0677c0576","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"2cd05c38a27bee7fb42aa4d43174d68ac55dac0f","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"b125b08dbee3611f03f53b71471813ed4ccafcdd","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"6c9041b2f90c0eace73106f22350e1d2c98f5edc","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"6dffc2035fbaada60ca8db59e0962e34f760370a","versionType":"git"},{"version":"6769140d304731f0a3b177470a2adb4bacd9036b","status":"affected","lessThan":"cd3a4907ee334b40d7aa880c7ab310b154fd5cd4","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/tty/mxser.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.33","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.33","versionType":"semver"},{"version":"4.9.311","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.276","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.238","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.189","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.110","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.33","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.16.19","status":"unaffected","lessThanOrEqual":"5.16.*","versionType":"semver"},{"version":"5.17.2","status":"unaffected","lessThanOrEqual":"5.17.*","versionType":"semver"},{"version":"5.18","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/tty/mxser.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/376922045009f8ea2d20a8fa3475e95b47c41690"},{"url":"https://git.kernel.org/stable/c/125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d"},{"url":"https://git.kernel.org/stable/c/685b6d16bf89595310b5d61394c9b97cc9505c7c"},{"url":"https://git.kernel.org/stable/c/996291d06851a26678a0fab488b6e1f0677c0576"},{"url":"https://git.kernel.org/stable/c/2cd05c38a27bee7fb42aa4d43174d68ac55dac0f"},{"url":"https://git.kernel.org/stable/c/b125b08dbee3611f03f53b71471813ed4ccafcdd"},{"url":"https://git.kernel.org/stable/c/6c9041b2f90c0eace73106f22350e1d2c98f5edc"},{"url":"https://git.kernel.org/stable/c/6dffc2035fbaada60ca8db59e0962e34f760370a"},{"url":"https://git.kernel.org/stable/c/cd3a4907ee334b40d7aa880c7ab310b154fd5cd4"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T18:54:53.083Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"4.9.311"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"4.14.276"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"4.19.238"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.4.189"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.10.110"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.15.33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.16.19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.17.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.18"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}