Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-49746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed. We already met the sdma_load_context() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ... In this case, the desc->bd will not be freed without this change.

Published

2025-03-27T17:15:39.343

Last Modified

2025-10-01T18:15:31.913

Status

Modified

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-401
  • Type: Secondary
    CWE-401
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel < 4.19.272 Yes
Operating System linux linux_kernel < 5.4.231 Yes
Operating System linux linux_kernel < 5.10.167 Yes
Operating System linux linux_kernel < 5.15.92 Yes
Operating System linux linux_kernel < 6.1.10 Yes
Operating System linux linux_kernel 6.2 Yes
Operating System linux linux_kernel 6.2 Yes
Operating System linux linux_kernel 6.2 Yes
Operating System linux linux_kernel 6.2 Yes
References