CVE-2022-49468

Source
https://cve.org/CVERecord?id=CVE-2022-49468
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49468.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49468
Downstream
Related
Published
2025-02-26T02:13:12.713Z
Modified
2026-04-11T12:44:04.338591Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
thermal/core: Fix memory leak in __thermal_cooling_device_register()
Details

In the Linux kernel, the following vulnerability has been resolved:

thermal/core: Fix memory leak in _thermalcoolingdeviceregister()

I got memory leak as follows when doing fault injection test:

unreferenced object 0xffff888010080000 (size 264312): comm "182", pid 102533, jiffies 4296434960 (age 10.100s) hex dump (first 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... ff ff ff ff ff ff ff ff 40 7f 1f b9 ff ff ff ff ........@....... backtrace: [<0000000038b2f4fc>] kmallocordertrace+0x1d/0x110 mm/slab_common.c:969 [<00000000ebcb8da5>] __kmalloc+0x373/0x420 include/linux/slab.h:510 [<0000000084137f13>] thermalcoolingdevicesetupsysfs+0x15d/0x2d0 include/linux/slab.h:586 [<00000000352b8755>] _thermalcoolingdeviceregister+0x332/0xa60 drivers/thermal/thermalcore.c:927 [<00000000fb9f331b>] devmthermalofcoolingdeviceregister+0x6b/0xf0 drivers/thermal/thermalcore.c:1041 [<000000009b8012d2>] max6650probe.cold+0x557/0x6aa drivers/hwmon/max6650.c:211 [<00000000da0b7e04>] i2cdeviceprobe+0x472/0xac0 drivers/i2c/i2c-core-base.c:561

If deviceregister() fails, thermalcoolingdevicedestroysysfs() need be called to free the memory allocated in thermalcoolingdevicesetup_sysfs().

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49468.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8ea229511e06f9635ecc338dcbe0db41a73623f0
Fixed
18530bedd221160823f63ccc20dd55c7a03edbcf
Fixed
21ccc58b671aea924f2481cf5c1cf0ebbfd3552d
Fixed
3802171f0b5b8b831f4ade5c827547cb323a5bb2
Fixed
9abdf0c0184230f0cb5c6685aabf33dda89aa9fb
Fixed
98a160e898c0f4a979af9de3ab48b4b1d42d1dbb

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49468.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.17.0
Fixed
5.10.121
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.46
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.17.14
Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49468.json"