CVE-2022-49891

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49891
In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak when there is no failure. Move kfree(buf) from fail path to common path to prevent the memleak. The same reason and solution in test_gen_kretprobe_cmd(). unreferenced object 0xffff888143b14000 (size 2048): comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s) hex dump (first 32 bytes): 70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp 72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys backtrace: [<000000006d7b836b>] kmalloc_trace+0x27/0xa0 [<0000000009528b5b>] 0xffffffffa059006f [<000000008408b580>] do_one_initcall+0x87/0x2a0 [<00000000c4980a7e>] do_init_module+0xdf/0x320 [<00000000d775aad0>] load_module+0x3006/0x3390 [<00000000e9a74b80>] __do_sys_finit_module+0x113/0x1b0 [<000000003726480d>] do_syscall_64+0x35/0x80 [<000000003441e93b>] entry_SYSCALL_64_after_hwframe+0x46/0xb0

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/66f0919c953ef7b55e5ab94389a013da2ce80a2c Patch
https://git.kernel.org/stable/c/71aeb8d01a8c7ab5cf7da3f81b35206f56ce6bca Patch
https://git.kernel.org/stable/c/bef08acbe560a926b4cee9cc46404cc98ae5703b Patch
https://git.kernel.org/stable/c/d1b6a8e3414aeaa0985139180c145d2d0fbd2a49 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
History

07 May 2025, 13:19

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/66f0919c953ef7b55e5ab94389a013da2ce80a2c - () https://git.kernel.org/stable/c/66f0919c953ef7b55e5ab94389a013da2ce80a2c - Patch
References () https://git.kernel.org/stable/c/71aeb8d01a8c7ab5cf7da3f81b35206f56ce6bca - () https://git.kernel.org/stable/c/71aeb8d01a8c7ab5cf7da3f81b35206f56ce6bca - Patch
References () https://git.kernel.org/stable/c/bef08acbe560a926b4cee9cc46404cc98ae5703b - () https://git.kernel.org/stable/c/bef08acbe560a926b4cee9cc46404cc98ae5703b - Patch
References () https://git.kernel.org/stable/c/d1b6a8e3414aeaa0985139180c145d2d0fbd2a49 - () https://git.kernel.org/stable/c/d1b6a8e3414aeaa0985139180c145d2d0fbd2a49 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*

02 May 2025, 13:52

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rastreo: kprobe: Se corrige la fuga de memoria en test_gen_kprobe/kretprobe_cmd(). test_gen_kprobe_cmd() solo libera búfer en la ruta de fallo, por lo que el búfer se filtrará cuando no haya fallo. Se traslada kfree(buf) de la ruta de fallo a la ruta común para evitar la fuga de memoria. El mismo motivo y solución se aplican en test_gen_kretprobe_cmd(). Objeto sin referencia 0xffff888143b14000 (size 2048): comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s) hex dump (first 32 bytes): 70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp 72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys backtrace: [&lt;000000006d7b836b&gt;] kmalloc_trace+0x27/0xa0 [&lt;0000000009528b5b&gt;] 0xffffffffa059006f [&lt;000000008408b580&gt;] do_one_initcall+0x87/0x2a0 [&lt;00000000c4980a7e&gt;] do_init_module+0xdf/0x320 [&lt;00000000d775aad0&gt;] load_module+0x3006/0x3390 [&lt;00000000e9a74b80&gt;] __do_sys_finit_module+0x113/0x1b0 [&lt;000000003726480d&gt;] do_syscall_64+0x35/0x80 [&lt;000000003441e93b&gt;] entry_SYSCALL_64_after_hwframe+0x46/0xb0

01 May 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 15:16

Updated : 2025-05-07 13:19

NVD link : CVE-2022-49891

Mitre link : CVE-2022-49891

CVE.ORG link : CVE-2022-49891

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime