CVE-2022-49191: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49191 is a vulnerability in the Linux kernel's mxser driver that was discovered and patched in early 2022. The issue involves a memory leak in the mxser driver's activate function when the LSR (Line Status Register) equals 0xff, which could occur during device initialization (Kernel Commit).

The vulnerability stems from a failure to properly free allocated memory (xmit_buf) in the mxser_activate() function when encountering certain error conditions. Specifically, when the LSR equals 0xff or when info->type is not set, the function would return without freeing the allocated buffer, leading to a memory leak. The issue was introduced by commit 6769140d3047 which implemented the tty_port_open method (Kernel Commit).

The vulnerability could result in memory leaks in systems using the mxser driver, potentially leading to resource exhaustion over time if the affected code path is repeatedly triggered.

The issue was fixed by properly freeing the buffer in a designated error label and ensuring all error paths properly clean up allocated resources. The fix was implemented in the Linux kernel through commit cd3a4907ee334b40d7aa880c7ab310b154fd5cd4 (Kernel Commit).