CVE-2022-49135

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49135
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak [why] Resource release is needed on the error handling path to prevent memory leak. [how] Fix this by adding kfree on the error handling path.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3ce1497add6d17b48cc9df65095bd20202d93994 Patch
https://git.kernel.org/stable/c/5d5c6dba2b43e28845d7d7ed32a36802329a5f52 Patch
https://git.kernel.org/stable/c/7e10369c72db7a0e2f77b2e306aadc07aef6b07a Patch
https://git.kernel.org/stable/c/9d0bef3cc22cf250278ed45b829f062a00af9e27 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 21:31

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Corregir pérdida de memoria [por qué] Se necesita la liberación de recursos en la ruta de manejo de errores para evitar pérdidas de memoria. [cómo] Solucione esto agregando kfree en la ruta de manejo de errores.
References () https://git.kernel.org/stable/c/3ce1497add6d17b48cc9df65095bd20202d93994 - () https://git.kernel.org/stable/c/3ce1497add6d17b48cc9df65095bd20202d93994 - Patch
References () https://git.kernel.org/stable/c/5d5c6dba2b43e28845d7d7ed32a36802329a5f52 - () https://git.kernel.org/stable/c/5d5c6dba2b43e28845d7d7ed32a36802329a5f52 - Patch
References () https://git.kernel.org/stable/c/7e10369c72db7a0e2f77b2e306aadc07aef6b07a - () https://git.kernel.org/stable/c/7e10369c72db7a0e2f77b2e306aadc07aef6b07a - Patch
References () https://git.kernel.org/stable/c/9d0bef3cc22cf250278ed45b829f062a00af9e27 - () https://git.kernel.org/stable/c/9d0bef3cc22cf250278ed45b829f062a00af9e27 - Patch

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 21:31

NVD link : CVE-2022-49135

Mitre link : CVE-2022-49135

CVE.ORG link : CVE-2022-49135

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime