Riskcovery

CVE-2022-49803

netdevsim: Fix memory leak of nsim_dev->fa_cookie

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
Jul 4, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: Fix memory leak of nsim_dev->fa_cookie

kmemleak reports this issue:

unreferenced object 0xffff8881bac872d0 (size 8): comm "sh", pid 58603, jiffies 4481524462 (age 68.065s) hex dump (first 8 bytes): 04 00 00 00 de ad be ef ........ backtrace: [<00000000c80b8577>] __kmalloc+0x49/0x150 [<000000005292b8c6>] nsim_dev_trap_fa_cookie_write+0xc1/0x210 [netdevsim] [<0000000093d78e77>] full_proxy_write+0xf3/0x180 [<000000005a662c16>] vfs_write+0x1c5/0xaf0 [<000000007aabf84a>] ksys_write+0xed/0x1c0 [<000000005f1d2e47>] do_syscall_64+0x3b/0x90 [<000000006001c6ec>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

The issue occurs in the following scenarios:

nsim_dev_trap_fa_cookie_write() kmalloc() fa_cookie nsim_dev->fa_cookie = fa_cookie .. nsim_drv_remove()

The fa_cookie allocked in nsim_dev_trap_fa_cookie_write() is not freed. To fix, add kfree(nsim_dev->fa_cookie) to nsim_drv_remove().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d3cbb907ae57fe5da314b51d949b617b538bdeae to before 7d79725a7073d86b9185f87718e22f3d65115801Affected
  • d3cbb907ae57fe5da314b51d949b617b538bdeae to before 6d463ddd0107d4188229d996dcdd45c99bad8af7Affected
  • d3cbb907ae57fe5da314b51d949b617b538bdeae to before 207edad5717e0a5709ce8467f0eff41c607835c9Affected
  • d3cbb907ae57fe5da314b51d949b617b538bdeae to before 064bc7312bd09a48798418663090be0c776183dbAffected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 5.10.260 through 5.10.*Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.0.10 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.