CVE-2022-49741: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49741 is a vulnerability discovered in the Linux kernel, specifically affecting the fbdev smscufx driver. The issue was disclosed and documented on March 27, 2025. The vulnerability involves error handling code in the ufxusbprobe function, where there are multiple unmatching issues including missing ufxfreeusblist calls and incorrect destroymodedb label handling (NVD).

The vulnerability stems from improper error handling code in the ufxusbprobe function within the Linux kernel's fbdev smscufx driver. The specific issues include missing ufxfreeusblist calls, incorrect destroymodedb label handling that should only include framebufferrelease, and fbdealloccmap only matching fballoc_cmap. This results in a memory leak bug where unreferenced objects remain in memory, as demonstrated by syzkaller reports (NVD).

The primary impact of this vulnerability is a memory leak in the Linux kernel. When triggered, the bug causes unreferenced objects to remain in memory, potentially leading to resource exhaustion over time. The issue was confirmed through syzkaller reports showing memory leaks of 128-byte objects (NVD).

The vulnerability has been resolved through a fix that rewrites the error handling code in ufxusbprobe. The solution addresses the unmatching issues and ensures proper cleanup of resources (NVD).