CVE-2022-49746
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/03/2025
Last modified:
28/03/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init<br />
<br />
If the function sdma_load_context() fails, the sdma_desc will be<br />
freed, but the allocated desc->bd is forgot to be freed.<br />
<br />
We already met the sdma_load_context() failure case and the log as<br />
below:<br />
[ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready<br />
...<br />
<br />
In this case, the desc->bd will not be freed without this change.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/1417f59ac0b02130ee56c0c50794b9b257be3d17
- https://git.kernel.org/stable/c/43acd767bd90c5d4172ce7fee5d9007a9a08dea9
- https://git.kernel.org/stable/c/80ee99e52936b2c04cc37b17a14b2ae2f9d282ac
- https://git.kernel.org/stable/c/bd0050b7ffa87c7b260d563646af612f4112a778
- https://git.kernel.org/stable/c/ce4745a6b8016fae74c95dcd457d4ceef7d98af1
- https://git.kernel.org/stable/c/dbe634ce824329d8f14079c3e9f8f11670894bec