CVE-2022-50500: netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed
In the Linux kernel, the following vulnerability has been resolved:
netdevsim: fix memory leak in nsimdrvprobe() when nsimdevresourcesregister() failed
If some items in nsimdevresourcesregister() fail, memory leak will occur. The following is the memory leak information.
unreferenced object 0xffff888074c02600 (size 128): comm "echo", pid 8159, jiffies 4294945184 (age 493.530s) hex dump (first 32 bytes): 40 47 ea 89 ff ff ff ff 01 00 00 00 00 00 00 00 @G.............. ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace: [<0000000011a31c98>] kmalloctrace+0x22/0x60 [<0000000027384c69>] devlresourceregister+0x144/0x4e0 [<00000000a16db248>] nsimdrvprobe+0x37a/0x1260 [<000000007d1f448c>] reallyprobe+0x20b/0xb10 [<00000000c416848a>] driverprobedevice+0x1b3/0x4a0 [<00000000077e0351>] driverprobedevice+0x49/0x140 [<0000000054f2465a>] deviceattachdriver+0x18c/0x2a0 [<000000008538f359>] busforeachdrv+0x151/0x1d0 [<0000000038e09747>] deviceattach+0x1c9/0x4e0 [<00000000dd86e533>] busprobedevice+0x1d5/0x280 [<00000000839bea35>] deviceadd+0xae0/0x1cb0 [<000000009c2abf46>] newdevicestore+0x3b6/0x5f0 [<00000000fb823d7f>] busattrstore+0x72/0xa0 [<000000007acc4295>] sysfskfwrite+0x106/0x160 [<000000005f50cb4d>] kernfsfopwriteiter+0x3a8/0x5a0 [<0000000075eb41bf>] vfswrite+0x8f0/0xc80
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50500?
CVE-2022-50500 is classified as a moderate severity vulnerability due to memory leak issues in the Linux kernel.
How does CVE-2022-50500 affect the Linux kernel?
CVE-2022-50500 leads to a potential memory leak when the nsim_dev_resources_register() function fails during the nsim_drv_probe() process.
How do I fix CVE-2022-50500?
To fix CVE-2022-50500, you should update your Linux kernel to a version that includes the patch addressing this vulnerability.
What versions of the Linux kernel are affected by CVE-2022-50500?
CVE-2022-50500 affects certain versions of the Linux kernel where the nsim_drv_probe() function is implemented.
Is CVE-2022-50500 a permanent issue in the Linux kernel?
No, CVE-2022-50500 has been resolved in subsequent updates to the Linux kernel.