CVE-2022-49277

Source
https://cve.org/CVERecord?id=CVE-2022-49277
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49277.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49277
Downstream
Related
Published
2025-02-26T01:56:21.037Z
Modified
2026-03-12T03:24:56.743426Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
jffs2: fix memory leak in jffs2_do_mount_fs
Details

In the Linux kernel, the following vulnerability has been resolved:

jffs2: fix memory leak in jffs2domount_fs

If jffs2buildfilesystem() in jffs2domount_fs() returns an error, we can observe the following kmemleak report:


unreferenced object 0xffff88811b25a640 (size 64): comm "mount", pid 691, jiffies 4294957728 (age 71.952s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffffa493be24>] kmemcachealloctrace+0x584/0x880 [<ffffffffa5423a06>] jffs2suminit+0x86/0x130 [<ffffffffa5400e58>] jffs2domountfs+0x798/0xac0 [<ffffffffa540acf3>] jffs2dofillsuper+0x383/0xc30 [<ffffffffa540c00a>] jffs2fill_super+0x2ea/0x4c0 [...] unreferenced object 0xffff88812c760000 (size 65536): comm "mount", pid 691, jiffies 4294957728 (age 71.952s) hex dump (first 32 bytes): bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ backtrace: [<ffffffffa493a449>] __kmalloc+0x6b9/0x910 [<ffffffffa5423a57>] jffs2suminit+0xd7/0x130 [<ffffffffa5400e58>] jffs2domountfs+0x798/0xac0 [<ffffffffa540acf3>] jffs2dofillsuper+0x383/0xc30 [<ffffffffa540c00a>] jffs2fillsuper+0x2ea/0x4c0

[...]

This is because the resources allocated in jffs2suminit() are not released. Call jffs2sumexit() to release these resources to solve the problem.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49277.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e631ddba588783edd521c5a89f7b2902772fb691
Fixed
2a9d8184458562e6bf2f40d0e677fc85e2dd3834
Fixed
9a0f6610c7daedd2eace430beeb08a8b7ac80699
Fixed
dbe0d0521eaa6a3d235517319266c539bb5c5112
Fixed
0978e9af4559a171ac7a74a1b3ef21804b0a0fa9
Fixed
607d3aab7349f18e0d9dba4100d09d16fe27caca
Fixed
4392e8aeebc5a4f8073620bccba7de1b1f6d7c88
Fixed
5f34310d1376ca5b2ed798258def2c2ab3cc6699
Fixed
c94128470e6fe53d9bd9d16d2d3271813f9d37af
Fixed
d051cef784de4d54835f6b6836d98a8f6935772c

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49277.json"