CVE-2022-49891: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
In the Linux kernel, the following vulnerability has been resolved:
tracing: kprobe: Fix memory leak in testgenkprobe/kretprobecmd()
testgenkprobecmd() only free buf in fail path, hence buf will leak when there is no failure. Move kfree(buf) from fail path to common path to prevent the memleak. The same reason and solution in testgenkretprobecmd().
unreferenced object 0xffff888143b14000 (size 2048): comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s) hex dump (first 32 bytes): 70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/genkp 72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robetest dosys backtrace: [<000000006d7b836b>] kmalloctrace+0x27/0xa0 [<0000000009528b5b>] 0xffffffffa059006f [<000000008408b580>] dooneinitcall+0x87/0x2a0 [<00000000c4980a7e>] doinitmodule+0xdf/0x320 [<00000000d775aad0>] loadmodule+0x3006/0x3390 [<00000000e9a74b80>] dosysfinitmodule+0x113/0x1b0 [<000000003726480d>] dosyscall64+0x35/0x80 [<000000003441e93b>] entrySYSCALL64afterhwframe+0x46/0xb0
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49891?
CVE-2022-49891 has a moderate severity level due to potential memory leaks leading to resource exhaustion.
How do I fix CVE-2022-49891?
To fix CVE-2022-49891, update your Linux kernel to the version that includes the patch for this vulnerability.
What systems are affected by CVE-2022-49891?
CVE-2022-49891 affects various versions of the Linux kernel that utilize the kprobe feature.
What type of vulnerability is CVE-2022-49891?
CVE-2022-49891 is a memory leak vulnerability specifically related to kernel tracing in the Linux kernel.
Is CVE-2022-49891 remotely exploitable?
CVE-2022-49891 is not considered remotely exploitable as it requires local access to trigger the memory leak.