CVE-2022-49745: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel was identified and tracked as CVE-2022-49745, specifically affecting the FPGA m10bmc-sec component. The issue was related to improper handling of probe error rollbacks that could potentially lead to resource leaks. This vulnerability was disclosed and documented on March 27, 2025 (NVD, CVE).

The vulnerability specifically affects the FPGA m10bmc-sec component in the Linux kernel, where probe error rollbacks were not being handled properly, potentially resulting in resource leaks. The issue required local access to exploit. While specific CVSS scores were not yet provided in the NVD database, Rapid7 has assigned it a severity score of 6.0 (Rapid7).

The vulnerability could lead to resource leaks in the Linux kernel when handling FPGA m10bmc-sec probe errors. The impact appears to be primarily related to system resources, potentially affecting system stability and performance (NVD).

The vulnerability has been fixed in various Linux distributions. Debian has addressed this in multiple releases: bullseye (5.10.234-1), bookworm (6.1.128-1), and sid/trixie (6.12.21-1). The fix involves proper handling of probe error rollbacks in the FPGA m10bmc-sec component (Debian).