CVE-2022-49627
published 2025-02-26CVE-2022-49627: In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in ima_init_crypto() On failure to allocate the SHA1 tfm…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
18.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix potential memory leak in ima_init_crypto()
On failure to allocate the SHA1 tfm, IMA fails to initialize and exits
without freeing the ima_algo_array. Add the missing kfree() for
ima_algo_array to avoid the potential memory leak.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6d94809af6b0830c4dfcad661535a5939bcb8a7d < c1d9702ceb4a091da6bee380627596d1fba09274 | c1d9702ceb4a091da6bee380627596d1fba09274 |
| linux | linux | >= 6d94809af6b0830c4dfcad661535a5939bcb8a7d < 601ae26aa2802a4c10c94d7388a99eabdbefab2b | 601ae26aa2802a4c10c94d7388a99eabdbefab2b |
| linux | linux | >= 6d94809af6b0830c4dfcad661535a5939bcb8a7d < 830de9667b3ada0a75a3f098dfc7159709fe397b | 830de9667b3ada0a75a3f098dfc7159709fe397b |
| linux | linux | >= 6d94809af6b0830c4dfcad661535a5939bcb8a7d < 067d2521874135267e681c19d42761c601d503d6 | 067d2521874135267e681c19d42761c601d503d6 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.136-1 | 5.10.136-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 5.11 < 5.15.56 | 5.15.56 |
| linux | linux_kernel | >= 5.16 < 5.18.13 | 5.18.13 |
| linux | linux_kernel | >= 5.8 < 5.10.132 | 5.10.132 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6hq5-4rhc-r2cc: In the Linux kernel, the following vulnerability has been resolved:
ima: Fix potential memory leak in ima_init_crypto()
On failure to allocate the S
ghsa_unreviewed·2025-03-12
CVE-2022-49627 [MEDIUM] CWE-401 GHSA-6hq5-4rhc-r2cc: In the Linux kernel, the following vulnerability has been resolved:
ima: Fix potential memory leak in ima_init_crypto()
On failure to allocate the S
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix potential memory leak in ima_init_crypto()
On failure to allocate the SHA1 tfm, IMA fails to initialize and exits
without freeing the ima_algo_array. Add the missing kfree() for
ima_algo_array to avoid the potential memory leak.
OSV
CVE-2022-49627: In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in ima_init_crypto() On failure to allocate the SHA
osv·2025-02-26·CVSS 5.5
CVE-2022-49627 [MEDIUM] CVE-2022-49627: In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in ima_init_crypto() On failure to allocate the SHA
In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in ima_init_crypto() On failure to allocate the SHA1 tfm, IMA fails to initialize and exits without freeing the ima_algo_array. Add the missing kfree() for ima_algo_array to avoid the potential memory leak.
Red Hat
kernel: ima: Fix potential memory leak in ima_init_crypto()
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49627 [MEDIUM] kernel: ima: Fix potential memory leak in ima_init_crypto()
kernel: ima: Fix potential memory leak in ima_init_crypto()
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix potential memory leak in ima_init_crypto()
On failure to allocate the SHA1 tfm, IMA fails to initialize and exits
without freeing the ima_algo_array. Add the missing kfree() for
ima_algo_array to avoid the potential memory leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linu
Debian
CVE-2022-49627: linux - In the Linux kernel, the following vulnerability has been resolved: ima: Fix po...
vendor_debian·2022·CVSS 5.5
CVE-2022-49627 [MEDIUM] CVE-2022-49627: linux - In the Linux kernel, the following vulnerability has been resolved: ima: Fix po...
In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in ima_init_crypto() On failure to allocate the SHA1 tfm, IMA fails to initialize and exits without freeing the ima_algo_array. Add the missing kfree() for ima_algo_array to avoid the potential memory leak.
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved (fixed in 5.10.136-1)
forky: resolved (fixed in 5.18.14-1)
sid: resolved (fixed in 5.18.14-1)
trixie: resolved (fixed in 5.18.14-1)
No detection rules found.
No public exploits indexed.
2025-02-26
Published