5.5

CVE-2022-49746

dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init

If the function sdma_load_context() fails, the sdma_desc will be
freed, but the allocated desc->bd is forgot to be freed.

We already met the sdma_load_context() failure case and the log as
below:
[ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready
...

In this case, the desc->bd will not be freed without this change.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version < 4.19.272
LinuxLinux Kernel Version >= 4.20 < 5.4.231
LinuxLinux Kernel Version >= 5.5 < 5.10.167
LinuxLinux Kernel Version >= 5.11 < 5.15.92
LinuxLinux Kernel Version >= 5.16 < 6.1.10
LinuxLinux Kernel Version6.2 Updaterc1
LinuxLinux Kernel Version6.2 Updaterc2
LinuxLinux Kernel Version6.2 Updaterc3
LinuxLinux Kernel Version6.2 Updaterc4
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.076
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/80ee99e52936b2c04cc37b17a14b2ae2f9d282ac
Patch
https://git.kernel.org/stable/c/dbe634ce824329d8f14079c3e9f8f11670894bec
Patch
https://git.kernel.org/stable/c/bd0050b7ffa87c7b260d563646af612f4112a778
Patch
https://git.kernel.org/stable/c/43acd767bd90c5d4172ce7fee5d9007a9a08dea9
Patch
https://git.kernel.org/stable/c/ce4745a6b8016fae74c95dcd457d4ceef7d98af1
Patch
https://git.kernel.org/stable/c/1417f59ac0b02130ee56c0c50794b9b257be3d17
Patch