Описание
In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
These local variables @{resched|pmu|callfunc...}name saves the new string allocated by kasprintf(), and when bind{v}ipi_to_irqhandler() fails, it goes to the @fail tag, and calls xen_smp_intr_free{_pv}() to free resource, however the new string is not saved, which cause a memory leak issue. fix it.
In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
These local variables @{resched|pmu|callfunc...}name saves the new string allocated by kasprintf(), and when bind{v}ipi_to_irqhandler() fails, it goes to the @fail tag, and calls xen_smp_intr_free{_pv}() to free resource, however the new string is not saved, which cause a memory leak issue. fix it.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2022-50495
- https://git.kernel.org/stable/c/23aef94eea714b721546c0c49a324a8da8d00fb5
- https://git.kernel.org/stable/c/69143f60868b3939ddc89289b29db593b647295e
- https://git.kernel.org/stable/c/8b6d78bb4ece809c425f96a47ca9b69385ba94bb
- https://git.kernel.org/stable/c/9209d2cbf5845b8bf8e722015d86f65a9d2bc76a
- https://git.kernel.org/stable/c/ec88254208dd01fa1646e939047d382b216340ac
- https://git.kernel.org/stable/c/f698f88f042c6a19bbbac6c84782039a75e7f349
- https://git.kernel.org/stable/c/fc134c355b5299495b14a54dd9bb7af8a646cb7c
CVE ID
Связанные уязвимости
A memory leak was found in the Linux kernel's Xen SMP interrupt initialization functions for x86 architectures. When interrupt handler binding fails during setup, the error path frees various resources but neglects to free dynamically allocated interrupt name strings created via kasprintf. This causes memory to leak with each failed initialization attempt, leading to resource exhaustion and denial of service.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.