CVE-2022-49671

RDMA/cm: Fix memory leak in ib_cm_insert_listen

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cm: Fix memory leak in ib_cm_insert_listen

cm_alloc_id_priv() allocates resource for the cm_id_priv. When cm_init_listen() fails it doesn't free it, leading to memory leak.

Add the missing error unwind.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	98f67156a80f37db70ec64787020b1f9bc8aea8c to before b0cab8b517aeaf2592c3479294f934209c41a26fAffected 98f67156a80f37db70ec64787020b1f9bc8aea8c to before 889000874c1204e47c7f2a4945db262a47e7efc9Affected 98f67156a80f37db70ec64787020b1f9bc8aea8c to before 2febf09a8a8ae4accf908f043f1bab1421056568Affected 98f67156a80f37db70ec64787020b1f9bc8aea8c to before 2990f223ffa7bb25422956b9f79f9176a5b38346Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.129 through 5.10.Not affected 5.15.53 through 5.15.Not affected 5.18.10 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.