CVE-2022-49024

A flaw was found in the Linux kernel. A local attacker could exploit a missing call to m_can_class_free_dev() in the m_can_pci_remove() and m_can_pci_probe() error handling paths. This oversight leads to a memory leak, which could result in a denial of service (DoS) due to resource exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the m_can kernel module from loading. Create a file /etc/modprobe.d/blacklist-m_can.conf with the content blacklist m_can. Then, regenerate the initramfs using sudo dracut -f -v and reboot the system for the changes to take effect. This action may impact functionality that relies on the m_can driver, such as Controller Area Network (CAN) bus communication via PCI devices.