CVE-2022-49893: cxl/region: Fix cxl_region leak, cleanup targets at region delete
In the Linux kernel, the following vulnerability has been resolved:
cxl/region: Fix cxlregion leak, cleanup targets at region delete
When a region is deleted any targets that have been previously assigned to that region hold references to it. Trigger those references to drop by detaching all targets at unregisterregion() time.
Otherwise that region object will leak as userspace has lost the ability to detach targets once region sysfs is torn down.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49893?
CVE-2022-49893 has been classified as a moderate severity vulnerability.
How do I fix CVE-2022-49893?
To fix CVE-2022-49893, you should update the Linux kernel to a version where this vulnerability has been patched.
What systems are affected by CVE-2022-49893?
CVE-2022-49893 affects systems running vulnerable versions of the Linux kernel.
What is the cause of CVE-2022-49893?
CVE-2022-49893 is caused by a leak in the cxl_region handling when targets are not properly cleaned up during region deletion.
Is CVE-2022-49893 exploitable?
CVE-2022-49893 may be exploitable under certain conditions where targets retain references after a region deletion.