CVE-2022-49860: dmaengine: ti: k3-udma-glue: fix memory leak when register device fail
Published May 1, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: ti: k3-udma-glue: fix memory leak when register device fail
If deviceregister() fails, it should call putdevice() to give up reference, the name allocated in devsetname() can be freed in callback function kobjectcleanup().
Affected Software
7 affected components
Linux Linux kernel>=5.11<5.15.79
Linux Linux kernel>=5.16<6.0.9
Linux Linux kernel=6.1-rc1
Linux Linux kernel=6.1-rc2
Linux Linux kernel=6.1-rc3
Linux Linux kernel=6.1-rc4
Linux Kernel
Remediation
Event History
May 1, 2025
CVE Published
via MITRE·02:10 PM
Data Sourced
via MITRE·02:10 PM
Description
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-49860?
CVE-2022-49860 has been rated as a low severity vulnerability.
2
How do I fix CVE-2022-49860?
To fix CVE-2022-49860, update to the latest version of the Linux kernel that includes the patch.
3
What type of vulnerability is CVE-2022-49860?
CVE-2022-49860 is a memory leak vulnerability in the Linux kernel's DMA engine.
4
Which systems are affected by CVE-2022-49860?
CVE-2022-49860 affects systems running vulnerable versions of the Linux kernel that utilize the DMA engine.
5
Is CVE-2022-49860 a critical vulnerability?
No, CVE-2022-49860 is classified as low severity and does not pose an immediate critical threat.