Memory leak in Linux kernel xtensa kernel

1) Memory leak

EUVDB-ID: #VU104339

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49682

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the calibrate_ccount() function in arch/xtensa/kernel/time.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 4.19 - 4.19.249

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:4.19:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.6:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.7:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.8:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.19.9:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/0dcc1dd8a5dd9240639f1051dfaa2dffc9fbbde5
https://git.kernel.org/stable/c/0e403a383c14b63c86bd9df085b7e573e9caee64
https://git.kernel.org/stable/c/3e5eb904d9ba657308fc75a5de434b0e58dcb8d7
https://git.kernel.org/stable/c/7de4502af68f4f3932f450157f5483eb7b33cb74
https://git.kernel.org/stable/c/a0117dc956429f2ede17b323046e1968d1849150
https://git.kernel.org/stable/c/af0ff2da01521144bc11194f4c26485d7c9cee73
https://git.kernel.org/stable/c/e5234a9d64a976abd134a14710dcd5188158a7c5
https://git.kernel.org/stable/c/f1eaf4ba5372ad111f687a80c67e270708e14c23
https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.250

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.