CVE-2022-49422: dmaengine: idxd: Fix the error handling path in idxd_cdev_register()
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Fix the error handling path in idxdcdevregister()
If a call to allocchrdevregion() fails, the already allocated resources are leaking.
Add the needed error handling path to fix the leak.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.18.5-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.10.121 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.15.46 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.17.14 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.18.3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49422?
CVE-2022-49422 is categorized as a moderate severity vulnerability within the Linux kernel.
How do I fix CVE-2022-49422?
To mitigate CVE-2022-49422, users should update their Linux kernel to the latest version that contains the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2022-49422?
CVE-2022-49422 affects specific versions of the Linux kernel prior to the release that includes the fix.
What is the nature of the vulnerability in CVE-2022-49422?
CVE-2022-49422 involves improper error handling in the idxd_cdev_register function, leading to resource leakage.
Is CVE-2022-49422 exploitable remotely?
CVE-2022-49422 does not indicate remote exploitability as it pertains to the Linux kernel's internal handling.