CVE-2022-49148

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49148
In the Linux kernel, the following vulnerability has been resolved: watch_queue: Free the page array when watch_queue is dismantled Commit 7ea1a0124b6d ("watch_queue: Free the alloc bitmap when the watch_queue is torn down") took care of the bitmap, but not the page array. BUG: memory leak unreferenced object 0xffff88810d9bc140 (size 32): comm "syz-executor335", pid 3603, jiffies 4294946994 (age 12.840s) hex dump (first 32 bytes): 40 a7 40 04 00 ea ff ff 00 00 00 00 00 00 00 00 @.@............. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: kmalloc_array include/linux/slab.h:621 [inline] kcalloc include/linux/slab.h:652 [inline] watch_queue_set_size+0x12f/0x2e0 kernel/watch_queue.c:251 pipe_ioctl+0x82/0x140 fs/pipe.c:632 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0xfc/0x140 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/375cd2536494cfbcdda84ae8b3e35bf19d0250b9 Patch
https://git.kernel.org/stable/c/3963a5d1ff75585bddf0c3a918566a6be09d7520 Patch
https://git.kernel.org/stable/c/4913daecd04addb41bc96a9175a885e1c19862a8 Patch
https://git.kernel.org/stable/c/7169f60110915c8b53bffd43741fa020a75eb87a Patch
https://git.kernel.org/stable/c/b490207017ba237d97b735b2aa66dc241ccd18f5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 22:04

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: watch_queue: liberar la matriz de páginas cuando se desmantela watch_queue. el commit 7ea1a0124b6d ("watch_queue: liberar el mapa de bits de asignación cuando se desmantela watch_queue") se hizo cargo del mapa de bits, pero no de la matriz de páginas. ERROR: pérdida de memoria objeto no referenciado 0xffff88810d9bc140 (tamaño 32): comm "syz-executor335", pid 3603, jiffies 4294946994 (edad 12.840s) volcado hexadecimal (primeros 32 bytes): 40 a7 40 04 00 ea ff ff 00 00 00 00 00 00 00 00 @.@............. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: kmalloc_array include/linux/slab.h:621 [en línea] kcalloc include/linux/slab.h:652 [en línea] watch_queue_set_size+0x12f/0x2e0 kernel/watch_queue.c:251 pipe_ioctl+0x82/0x140 fs/pipe.c:632 vfs_ioctl fs/ioctl.c:51 [en línea] __do_sys_ioctl fs/ioctl.c:874 [en línea] __se_sys_ioctl fs/ioctl.c:860 [en línea] __x64_sys_ioctl+0xfc/0x140 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [en línea]
References () https://git.kernel.org/stable/c/375cd2536494cfbcdda84ae8b3e35bf19d0250b9 - () https://git.kernel.org/stable/c/375cd2536494cfbcdda84ae8b3e35bf19d0250b9 - Patch
References () https://git.kernel.org/stable/c/3963a5d1ff75585bddf0c3a918566a6be09d7520 - () https://git.kernel.org/stable/c/3963a5d1ff75585bddf0c3a918566a6be09d7520 - Patch
References () https://git.kernel.org/stable/c/4913daecd04addb41bc96a9175a885e1c19862a8 - () https://git.kernel.org/stable/c/4913daecd04addb41bc96a9175a885e1c19862a8 - Patch
References () https://git.kernel.org/stable/c/7169f60110915c8b53bffd43741fa020a75eb87a - () https://git.kernel.org/stable/c/7169f60110915c8b53bffd43741fa020a75eb87a - Patch
References () https://git.kernel.org/stable/c/b490207017ba237d97b735b2aa66dc241ccd18f5 - () https://git.kernel.org/stable/c/b490207017ba237d97b735b2aa66dc241ccd18f5 - Patch
First Time Linux
Linux linux Kernel
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 22:04

NVD link : CVE-2022-49148

Mitre link : CVE-2022-49148

CVE.ORG link : CVE-2022-49148

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime