CVE-2022-49671

published 2025-02-26

CVE-2022-49671: In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix memory leak in ib_cm_insert_listen cm_alloc_id_priv() allocates resource for…

Priority P4 16 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cm: Fix memory leak in ib_cm_insert_listen

cm_alloc_id_priv() allocates resource for the cm_id_priv. When
cm_init_listen() fails it doesn't free it, leading to memory leak.

Add the missing error unwind.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.18.14-1 (bookworm)	linux 5.18.14-1 (bookworm)
linux	linux	—	—
linux	linux	>= 98f67156a80f37db70ec64787020b1f9bc8aea8c < b0cab8b517aeaf2592c3479294f934209c41a26f	b0cab8b517aeaf2592c3479294f934209c41a26f
linux	linux	>= 98f67156a80f37db70ec64787020b1f9bc8aea8c < 889000874c1204e47c7f2a4945db262a47e7efc9	889000874c1204e47c7f2a4945db262a47e7efc9
linux	linux	>= 98f67156a80f37db70ec64787020b1f9bc8aea8c < 2febf09a8a8ae4accf908f043f1bab1421056568	2febf09a8a8ae4accf908f043f1bab1421056568
linux	linux	>= 98f67156a80f37db70ec64787020b1f9bc8aea8c < 2990f223ffa7bb25422956b9f79f9176a5b38346	2990f223ffa7bb25422956b9f79f9176a5b38346
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 5.10.136-1	5.10.136-1
linux	linux_kernel	>= 0 < 5.18.14-1	5.18.14-1
linux	linux_kernel	>= 0 < 5.18.14-1	5.18.14-1
linux	linux_kernel	>= 0 < 5.18.14-1	5.18.14-1
linux	linux_kernel	>= 5.11 < 5.15.53	5.15.53
linux	linux_kernel	>= 5.16 < 5.18.10	5.18.10
linux	linux_kernel	>= 5.7 < 5.10.129	5.10.129

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-401