CVE-2022-50438: net: hinic: fix memory leak when reading function table
In the Linux kernel, the following vulnerability has been resolved:
net: hinic: fix memory leak when reading function table
When the input parameter idx meets the expected case option in hinicdbggetfunctable(), readdata is not released. Fix it.
Affected Software
Remediation
Event History
Frequently Asked Questions
What level of access does an attacker need, and what is the expected impact?
Exploitation requires local access and low privileges; no user interaction is required. The documented impact is denial of service through a memory leak, with no stated confidentiality or integrity impact.
Which systems and code path are affected?
The leak occurs when hinic_dbg_get_func_table() receives an idx value that matches an expected case option, causing read_data not to be released. Systems using the hinic network driver and reaching that code path are the relevant exposure population.
What remediation or temporary mitigation is available?
Apply the available Linux kernel patch. The provided data does not identify a configuration workaround or mitigation for systems that cannot yet be patched.