CVE-2022-49206

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

In case the second xa_insert() fails, the obj_event is not released. Fix the error unwind flow to free that memory to avoid a memory leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	7597385371425febdaa8c6a1da3625d4ffff16f5 to before 0174a89663a5ef83617da15bf24c0af2f62b6c7fAffected 7597385371425febdaa8c6a1da3625d4ffff16f5 to before c98d903ff9e79c210beddea4e6bc15ac38e25aa5Affected 7597385371425febdaa8c6a1da3625d4ffff16f5 to before 8dd392e352d3269938fea32061a74655a613f929Affected 7597385371425febdaa8c6a1da3625d4ffff16f5 to before d66498507801fd9a20307a15a0814a0a016c3cdeAffected 7597385371425febdaa8c6a1da3625d4ffff16f5 to before 414b4e8738484379f18d6c4e780787c80dbf8a2cAffected 7597385371425febdaa8c6a1da3625d4ffff16f5 to before 087f9c3f2309ed183f7e4b85ae57121d8663224dAffected
LinuxLinux	5.3Affected before 5.3Not affected 5.4.189 through 5.4.Not affected 5.10.110 through 5.10.Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.*Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

7597385371425febdaa8c6a1da3625d4ffff16f5 to before 0174a89663a5ef83617da15bf24c0af2f62b6c7fAffected
7597385371425febdaa8c6a1da3625d4ffff16f5 to before c98d903ff9e79c210beddea4e6bc15ac38e25aa5Affected
7597385371425febdaa8c6a1da3625d4ffff16f5 to before 8dd392e352d3269938fea32061a74655a613f929Affected
7597385371425febdaa8c6a1da3625d4ffff16f5 to before d66498507801fd9a20307a15a0814a0a016c3cdeAffected
7597385371425febdaa8c6a1da3625d4ffff16f5 to before 414b4e8738484379f18d6c4e780787c80dbf8a2cAffected
7597385371425febdaa8c6a1da3625d4ffff16f5 to before 087f9c3f2309ed183f7e4b85ae57121d8663224dAffected

LinuxLinux

5.3Affected
before 5.3Not affected
5.4.189 through 5.4.*Not affected
5.10.110 through 5.10.*Not affected
5.15.33 through 5.15.*Not affected
5.16.19 through 5.16.*Not affected
5.17.2 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.