Memory leak in Linux kernel - CVE-2022-49052

Vulnerability identifier: #VU104355

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49052

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the end_swap_bio_write(), end_swap_bio_read() and swap_readpage() functions in mm/page_io.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
openEuler
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python2-perf
python2-perf-debuginfo
python3-perf
python3-perf-debuginfo

Install update from vendor's website.

Linux kernel - update to 4.19.242
kernel - update to 4.19.90-2503.4.0.0320
bpftool - update to 4.19.90-2503.4.0.0320
bpftool-debuginfo - update to 4.19.90-2503.4.0.0320
kernel-debuginfo - update to 4.19.90-2503.4.0.0320
kernel-debugsource - update to 4.19.90-2503.4.0.0320
kernel-devel - update to 4.19.90-2503.4.0.0320
kernel-source - update to 4.19.90-2503.4.0.0320
kernel-tools - update to 4.19.90-2503.4.0.0320
kernel-tools-debuginfo - update to 4.19.90-2503.4.0.0320
kernel-tools-devel - update to 4.19.90-2503.4.0.0320
perf - update to 4.19.90-2503.4.0.0320
perf-debuginfo - update to 4.19.90-2503.4.0.0320
python2-perf - update to 4.19.90-2503.4.0.0320
python2-perf-debuginfo - update to 4.19.90-2503.4.0.0320
python3-perf - update to 4.19.90-2503.4.0.0320
python3-perf-debuginfo - update to 4.19.90-2503.4.0.0320

• https://git.kernel.org/stable/c/12ba1d38115a101c45d8e0ca3aa1181fd148e57f
• https://git.kernel.org/stable/c/20ed94f8181a25212e7404e44958e234f407624b
• https://git.kernel.org/stable/c/afac4b88699a06c8b9369f9d759a1ec3c254b788
• https://git.kernel.org/stable/c/e914d8f00391520ecc4495dd0ca0124538ab7119
• https://git.kernel.org/stable/c/f098f8b9820fe3f2e41aefc4329dfe8a3859d1c1
• https://git.kernel.org/stable/c/f86d55cf616199404c05f5b0c5c41b17351baa02
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.242

• Memory leak in Linux kernel mm
• openEuler 20.03 LTS SP4 update for kernel