CVE-2022-49210

MIPS: pgalloc: fix memory leak caused by pgd_free()

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

MIPS: pgalloc: fix memory leak caused by pgd_free()

pgd page is freed by generic implementation pgd_free() since commit f9cb654cb550 ("asm-generic: pgalloc: provide generic pgd_free()"), however, there are scenarios that the system uses more than one page as the pgd table, in such cases the generic implementation pgd_free() won't be applicable anymore. For example, when PAGE_SIZE_4KB is enabled and MIPS_VA_BITS_48 is not enabled in a 64bit system, the macro "PGD_ORDER" will be set as "1", which will cause allocating two pages as the pgd table. Well, at the same time, the generic implementation pgd_free() just free one pgd page, which will result in the memory leak.

The memory leak can be easily detected by executing shell command: "while true; do ls > /dev/null; grep MemFree /proc/meminfo; done"

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • f9cb654cb550b7b87e8608b14fc3eca432429ffe to before fa3d44424579972cc7c4fac3d9cf227798ebdfa0Affected
  • f9cb654cb550b7b87e8608b14fc3eca432429ffe to before d29cda15cab086d82d692de016f7249545d4b6b4Affected
  • f9cb654cb550b7b87e8608b14fc3eca432429ffe to before 5a8501d34b261906e4c76ec9da679f2cb4d309edAffected
  • f9cb654cb550b7b87e8608b14fc3eca432429ffe to before 1bf0d78c8cc3cf615a6e7bf33ada70b73592f0a1Affected
  • f9cb654cb550b7b87e8608b14fc3eca432429ffe to before 2bc5bab9a763d520937e4f3fe8df51c6a1eceb97Affected
LinuxLinux
  • 5.9Affected
  • before 5.9Not affected
  • 5.10.110 through 5.10.*Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.