CVE-2022-49746

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49746
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49746.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49746
Downstream
Related
Published
2025-03-27T16:42:56.372Z
Modified
2026-04-11T12:44:28.681886Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
Details

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: imx-sdma: Fix a possible memory leak in sdmatransferinit

If the function sdmaloadcontext() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed.

We already met the sdmaloadcontext() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ...

In this case, the desc->bd will not be freed without this change.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49746.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
21420841a554dae8a193cd3454ba91d913cfc320
Fixed
80ee99e52936b2c04cc37b17a14b2ae2f9d282ac
Fixed
dbe634ce824329d8f14079c3e9f8f11670894bec
Fixed
bd0050b7ffa87c7b260d563646af612f4112a778
Fixed
43acd767bd90c5d4172ce7fee5d9007a9a08dea9
Fixed
ce4745a6b8016fae74c95dcd457d4ceef7d98af1
Fixed
1417f59ac0b02130ee56c0c50794b9b257be3d17

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49746.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.19.0
Fixed
4.19.272
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.231
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.167
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.92
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49746.json"