CVE-2022-49370

Summary

In the Linux kernel, the following vulnerability has been resolved:

firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle

kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()

If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object.

Fix this issue by calling kobject_put().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < a9bfb37d6ba7c376b0d53337a4c5f5ff324bd725affected
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < ed38d04342dfbe9e5aca745c8b5eb4188a74f0efaffected
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < c66cc3c62870a27ea8f060a7e4c1ad8d26dd3f0daffected
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < a724634b2a49f6ff0177a9e19a5a92fc1545e1b7affected
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < 985706bd3bbeffc8737bc05965ca8d24837bc7dbaffected
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < fdffa4ad8f6bf1ece877edfb807f2b2c729d8578affected
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < 3ba359ebe914ac3f8c6c832b28007c14c39d3766affected
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < ec752973aa721ee281d5441e497364637c626c7baffected
LinuxLinux948af1f0bbc8526448e8cbe3f8d3bf211bdf5181 < 660ba678f9998aca6db74f2dd912fa5124f0fa31affected
LinuxLinux2.6.39affected
LinuxLinux0 < 2.6.39unaffected
LinuxLinux4.9.318 <= 4.9.*unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References