CVE-2022-50287: drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/bios: fix a memory leak in generatelfpdataptrs
When (size != 0 || ptrs->lvds entries != 3), the program tries to free() the ptrs. However, the ptrs is not created by calling kzmalloc(), but is obtained by pointer offset operation. This may lead to memory leaks or undefined behavior.
Fix this by replacing the arguments of kfree() with ptrsblock.
(cherry picked from commit 7674cd0b7d28b952151c3df26bbfa7e07eb2b4ec)
Affected Software
Remediation
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What is the primary impact if the vulnerability is exploited?
The reported impact is on availability, with no reported confidentiality or integrity impact. The flaw can lead to a memory leak or undefined behavior.
Is a fix available?
Yes. A patch is available through the referenced Linux stable kernel commits.