CVE-2022-49115: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49115 affects the Linux kernel's PCI endpoint functionality. The vulnerability was discovered in January 2022 and involves a misused goto label in the PCI endpoint driver that could result in a memory leak (Kernel Git). The issue affects various Ubuntu Linux distributions including versions 22.04 LTS (jammy) and 20.04 LTS (focal) (Ubuntu Security).

The vulnerability exists in the drivers/pci/endpoint/functions/pci-epf-test.c file where an incorrect goto label (errmapaddr) was used instead of the correct label (errdmamap). This misused goto label could lead to a memory leak in the PCI endpoint driver when DMA transfers are not supported (Kernel Git).

The vulnerability can result in memory leaks in the Linux kernel's PCI endpoint functionality when DMA transfers are attempted but not supported by the system (Kernel Git).

The issue has been fixed through a patch that corrects the goto label from errmapaddr to errdmamap. The fix has been merged into the Linux kernel and is being rolled out to affected distributions. Ubuntu has marked this as a medium priority issue and is working on updates for affected versions (Ubuntu Security).