CVE-2022-48924

thermal: int340x: fix memory leak in int3400_notify()

State
Published
Severity
Not scored
Published
Aug 22, 2024
Updated
May 11, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal: int340x: fix memory leak in int3400_notify()

It is easy to hit the below memory leaks in my TigerLake platform:

unreferenced object 0xffff927c8b91dbc0 (size 32): comm "kworker/0:2", pid 112, jiffies 4294893323 (age 83.604s) hex dump (first 32 bytes): 4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The 72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk. backtrace: [<ffffffff9c502c3e>] __kmalloc_track_caller+0x2fe/0x4a0 [<ffffffff9c7b7c15>] kvasprintf+0x65/0xd0 [<ffffffff9c7b7d6e>] kasprintf+0x4e/0x70 [<ffffffffc04cb662>] int3400_notify+0x82/0x120 [int3400_thermal] [<ffffffff9c8b7358>] acpi_ev_notify_dispatch+0x54/0x71 [<ffffffff9c88f1a7>] acpi_os_execute_deferred+0x17/0x30 [<ffffffff9c2c2c0a>] process_one_work+0x21a/0x3f0 [<ffffffff9c2c2e2a>] worker_thread+0x4a/0x3b0 [<ffffffff9c2cb4dd>] kthread+0xfd/0x130 [<ffffffff9c201c1f>] ret_from_fork+0x1f/0x30

Fix it by calling kfree() accordingly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 38e44da591303d08b0d965a033e11ade284999d0 to before f0ddc5184b0127038d05008e2a69f89d1e13f980Affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to before c3fa6d1937a8d0828131a04ae2cd2c30d0668693Affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to before 2e798814e01827871938ff172d2b2ccf1e74b355Affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to before e098933866f9e1dd3ef4eebbe2e3d504f970f599Affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to before ba9efbbf6745750d34c1e87c9539ce9db645ca0aAffected
  • 38e44da591303d08b0d965a033e11ade284999d0 to before 33c73a4d7e7b19313a6b417152f5365016926418Affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to before 3abea10e6a8f0e7804ed4c124bea2d15aca977c8Affected
LinuxLinux
  • 4.14Affected
  • before 4.14Not affected
  • 4.14.274 through 4.14.*Not affected
  • 4.19.237 through 4.19.*Not affected
  • 5.4.188 through 5.4.*Not affected
  • 5.10.103 through 5.10.*Not affected
  • 5.15.26 through 5.15.*Not affected
  • 5.16.12 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.