CVE-2022-49819

Summary

In the Linux kernel, the following vulnerability has been resolved: octeon_ep: fix potential memory leak in octep_device_setup() When occur unsupported_dev and mbox init errors, it did not free oct->conf and iounmap() oct->mmio[i].hw_addr. That would trigger memory leak problem. Add kfree() for oct->conf and iounmap() for oct->mmio[i].hw_addr under unsupported_dev and mbox init errors to fix the problem.

Impact & exploitability

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: https://git.kernel.org/stable/c/67b65a0db8a7fdad43159819f41335497a4bb04f ↗

Additional information

• NVD record
• https://git.kernel.org/stable/c/67b65a0db8a7fdad43159819f41335497a4bb04fPatch
• https://git.kernel.org/stable/c/e4041be97b15302ebfffda8bbd45f3b2d096048fPatch