CVE-2022-49746

dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init

State: Published
Severity: 5.5 Medium
Published: Mar 27, 2025
Updated: May 11, 2026
Reserved: Mar 27, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init

If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed.

We already met the sdma_load_context() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ...

In this case, the desc->bd will not be freed without this change.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	21420841a554dae8a193cd3454ba91d913cfc320 to before 80ee99e52936b2c04cc37b17a14b2ae2f9d282acAffected 21420841a554dae8a193cd3454ba91d913cfc320 to before dbe634ce824329d8f14079c3e9f8f11670894becAffected 21420841a554dae8a193cd3454ba91d913cfc320 to before bd0050b7ffa87c7b260d563646af612f4112a778Affected 21420841a554dae8a193cd3454ba91d913cfc320 to before 43acd767bd90c5d4172ce7fee5d9007a9a08dea9Affected 21420841a554dae8a193cd3454ba91d913cfc320 to before ce4745a6b8016fae74c95dcd457d4ceef7d98af1Affected 21420841a554dae8a193cd3454ba91d913cfc320 to before 1417f59ac0b02130ee56c0c50794b9b257be3d17Affected
LinuxLinux	4.19Affected before 4.19Not affected 4.19.272 through 4.19.Not affected 5.4.231 through 5.4.Not affected 5.10.167 through 5.10.Not affected 5.15.92 through 5.15.Not affected 6.1.10 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

21420841a554dae8a193cd3454ba91d913cfc320 to before 80ee99e52936b2c04cc37b17a14b2ae2f9d282acAffected
21420841a554dae8a193cd3454ba91d913cfc320 to before dbe634ce824329d8f14079c3e9f8f11670894becAffected
21420841a554dae8a193cd3454ba91d913cfc320 to before bd0050b7ffa87c7b260d563646af612f4112a778Affected
21420841a554dae8a193cd3454ba91d913cfc320 to before 43acd767bd90c5d4172ce7fee5d9007a9a08dea9Affected
21420841a554dae8a193cd3454ba91d913cfc320 to before ce4745a6b8016fae74c95dcd457d4ceef7d98af1Affected
21420841a554dae8a193cd3454ba91d913cfc320 to before 1417f59ac0b02130ee56c0c50794b9b257be3d17Affected

LinuxLinux

4.19Affected
before 4.19Not affected
4.19.272 through 4.19.*Not affected
5.4.231 through 5.4.*Not affected
5.10.167 through 5.10.*Not affected
5.15.92 through 5.15.*Not affected
6.1.10 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.