Memory leak in Linux kernel - CVE-2022-49439

Vulnerability identifier: #VU104281

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:U/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-49439

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the fsl_rio_setup() function in arch/powerpc/sysdev/fsl_rio.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
openEuler
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python2-perf
python2-perf-debuginfo
python3-perf
python3-perf-debuginfo

Install update from vendor's website.

Linux kernel - addressed in versions 4.14.283, 4.19.247, 5.4.198, 5.10.121, 5.15.46, 5.17.14, 5.18.3, 5.19
kernel - update to 4.19.90-2503.3.0.0319
bpftool - update to 4.19.90-2503.3.0.0319
bpftool-debuginfo - update to 4.19.90-2503.3.0.0319
kernel-debuginfo - update to 4.19.90-2503.3.0.0319
kernel-debugsource - update to 4.19.90-2503.3.0.0319
kernel-devel - update to 4.19.90-2503.3.0.0319
kernel-source - update to 4.19.90-2503.3.0.0319
kernel-tools - update to 4.19.90-2503.3.0.0319
kernel-tools-debuginfo - update to 4.19.90-2503.3.0.0319
kernel-tools-devel - update to 4.19.90-2503.3.0.0319
perf - update to 4.19.90-2503.3.0.0319
perf-debuginfo - update to 4.19.90-2503.3.0.0319
python2-perf - update to 4.19.90-2503.3.0.0319
python2-perf-debuginfo - update to 4.19.90-2503.3.0.0319
python3-perf - update to 4.19.90-2503.3.0.0319
python3-perf-debuginfo - update to 4.19.90-2503.3.0.0319

• https://git.kernel.org/stable/c/46fd994763cf6884b88a2da712af918f3ed54d7b
• https://git.kernel.org/stable/c/51e25fbf20c9152d84a34b7afac15a41fe5c9116
• https://git.kernel.org/stable/c/5607a77a365df8c0fd5ff43ac424812b95775527
• https://git.kernel.org/stable/c/5b8aa2ba38c010f47c965dd9bb5a8561813ed649
• https://git.kernel.org/stable/c/7b668a59ddfb32727e39b06fdf52b28e58c684e0
• https://git.kernel.org/stable/c/bcb6c4c5eb4836a21411dfe8247bf9951eb6e7c3
• https://git.kernel.org/stable/c/c70dd353d37158e06bf8d450d4b31a7091609924
• https://git.kernel.org/stable/c/fcee96924ba1596ca80a6770b2567ca546f9a482
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.283
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.247
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.121
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.46
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.14
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.3
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.198

• Memory leak in Linux kernel powerpc sysdev
• openEuler 20.03 LTS SP4 update for kernel