CVE-2022-50529: test_firmware: fix memory leak in test_firmware_init()
In the Linux kernel, the following vulnerability has been resolved:
testfirmware: fix memory leak in testfirmwareinit()
When miscregister() failed in testfirmwareinit(), the memory pointed by testfwconfig->name is not released. The memory leak information is as follows: unreferenced object 0xffff88810a34cb00 (size 32): comm "insmod", pid 7952, jiffies 4294948236 (age 49.060s) hex dump (first 32 bytes): 74 65 73 74 2d 66 69 72 6d 77 61 72 65 2e 62 69 test-firmware.bi 6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 n............... backtrace: [<ffffffff81b21fcb>] kmallocnodetrackcaller+0x4b/0xc0 [<ffffffff81affb96>] kstrndup+0x46/0xc0 [<ffffffffa0403a49>] testfirmwareconfiginit+0x29/0x380 [testfirmware] [<ffffffffa040f068>] 0xffffffffa040f068 [<ffffffff81002c41>] dooneinitcall+0x141/0x780 [<ffffffff816a72c3>] doinitmodule+0x1c3/0x630 [<ffffffff816adb9e>] loadmodule+0x623e/0x76a0 [<ffffffff816af471>] dosysfinitmodule+0x181/0x240 [<ffffffff89978f99>] dosyscall64+0x39/0xb0 [<ffffffff89a0008b>] entrySYSCALL64afterhwframe+0x63/0xcd
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50529?
CVE-2022-50529 is classified as a medium severity vulnerability due to the memory leak in the Linux kernel.
How do I fix CVE-2022-50529?
To fix CVE-2022-50529, you should apply the updates provided by your Linux distribution that address this vulnerability.
What systems are impacted by CVE-2022-50529?
CVE-2022-50529 affects various versions of the Linux kernel from version 4.14 to 6.1.
What is the impact of CVE-2022-50529?
The impact of CVE-2022-50529 is a potential memory leak that can cause increased memory usage and instability in affected systems.
Is there a workaround for CVE-2022-50529?
Currently, there are no specific workarounds for CVE-2022-50529 other than updating to a patched version of the Linux kernel.