cxl: Fix a memory leak in an error handling path (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.19 % · centile 9 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmap_zalloc() must be balanced by a corresponding bitmap_free() in the error handling path of afu_allocate_irqs().
Faiblesses (CWE)
- CWE-401 — Mémoire non libérée après sa durée de vie utile
Références
- https://git.kernel.org/stable/c/c2c7a29f99788e9e5dfe41d16868ea33da7cc235
- https://git.kernel.org/stable/c/6544ff559315498ad6c0a311359ca44987f9ca07
- https://git.kernel.org/stable/c/89d51dc6878c47b6400922fac21b6a33f9d1a588
- https://git.kernel.org/stable/c/695af60af755873399ce01cb97176768828bc1fd
- https://git.kernel.org/stable/c/4be138bcd6d68cec0ce47051b117541061f5141a
- https://git.kernel.org/stable/c/addff638c41753639368c252d0c5ba0d8fe9ed97
- https://git.kernel.org/stable/c/c2557780ee7818b701681c226fa4cb7c0b171665
- https://git.kernel.org/stable/c/3a15b45b5454da862376b5d69a4967f5c6fa1368
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2022-55221
- GCVE · GCVE-0-2022-50025
Avis du CERT-FR
- CERTFR-2025-AVI-0723 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 3.19 < 4.9.326cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.10 < 4.14.291cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15 < 4.19.256cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.4.211cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.138cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.63cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 5.19.4
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < c2c7a29f99788e9e5dfe41d16868ea33da7cc235 ; affected 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 6544ff559315498ad6c0a311359ca44987f9ca07 ; affected 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 89d51dc6878c47b6400922fac21b6a33f9d1a588 ; affected 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 695af60af755873399ce01cb97176768828bc1fd ; affected 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 4be138bcd6d68cec0ce47051b117541061f5141a ; affected 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < addff638c41753639368c252d0c5ba0d8fe9ed97 |
| Linux · Linux | affected 3.19 ; unaffected 0 < 3.19 ; unaffected 4.9.326 ≤ 4.9.* ; unaffected 4.14.291 ≤ 4.14.* ; unaffected 4.19.256 ≤ 4.19.* ; unaffected 5.4.211 ≤ 5.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |