CVE-2022-49206

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49206
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in error flow for subscribe event routine In case the second xa_insert() fails, the obj_event is not released. Fix the error unwind flow to free that memory to avoid a memory leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0174a89663a5ef83617da15bf24c0af2f62b6c7f Patch
https://git.kernel.org/stable/c/087f9c3f2309ed183f7e4b85ae57121d8663224d Patch
https://git.kernel.org/stable/c/414b4e8738484379f18d6c4e780787c80dbf8a2c Patch
https://git.kernel.org/stable/c/8dd392e352d3269938fea32061a74655a613f929 Patch
https://git.kernel.org/stable/c/c98d903ff9e79c210beddea4e6bc15ac38e25aa5 Patch
https://git.kernel.org/stable/c/d66498507801fd9a20307a15a0814a0a016c3cde Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Mar 2025, 20:11

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/mlx5: Se corrige la pérdida de memoria en el flujo de error para la rutina de evento de suscripción. En caso de que falle el segundo xa_insert(), no se libera el obj_event. Corrija el flujo de desenrollado de error para liberar esa memoria y evitar una pérdida de memoria.
References () https://git.kernel.org/stable/c/0174a89663a5ef83617da15bf24c0af2f62b6c7f - () https://git.kernel.org/stable/c/0174a89663a5ef83617da15bf24c0af2f62b6c7f - Patch
References () https://git.kernel.org/stable/c/087f9c3f2309ed183f7e4b85ae57121d8663224d - () https://git.kernel.org/stable/c/087f9c3f2309ed183f7e4b85ae57121d8663224d - Patch
References () https://git.kernel.org/stable/c/414b4e8738484379f18d6c4e780787c80dbf8a2c - () https://git.kernel.org/stable/c/414b4e8738484379f18d6c4e780787c80dbf8a2c - Patch
References () https://git.kernel.org/stable/c/8dd392e352d3269938fea32061a74655a613f929 - () https://git.kernel.org/stable/c/8dd392e352d3269938fea32061a74655a613f929 - Patch
References () https://git.kernel.org/stable/c/c98d903ff9e79c210beddea4e6bc15ac38e25aa5 - () https://git.kernel.org/stable/c/c98d903ff9e79c210beddea4e6bc15ac38e25aa5 - Patch
References () https://git.kernel.org/stable/c/d66498507801fd9a20307a15a0814a0a016c3cde - () https://git.kernel.org/stable/c/d66498507801fd9a20307a15a0814a0a016c3cde - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-18 20:11

NVD link : CVE-2022-49206

Mitre link : CVE-2022-49206

CVE.ORG link : CVE-2022-49206

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime