CVE-2022-49746
published 2025-03-27CVE-2022-49746: In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
8.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
If the function sdma_load_context() fails, the sdma_desc will be
freed, but the allocated desc->bd is forgot to be freed.
We already met the sdma_load_context() failure case and the log as
below:
[ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready
...
In this case, the desc->bd will not be freed without this change.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.11-1 (bookworm) | linux 6.1.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 21420841a554dae8a193cd3454ba91d913cfc320 < 80ee99e52936b2c04cc37b17a14b2ae2f9d282ac | 80ee99e52936b2c04cc37b17a14b2ae2f9d282ac |
| linux | linux | >= 21420841a554dae8a193cd3454ba91d913cfc320 < dbe634ce824329d8f14079c3e9f8f11670894bec | dbe634ce824329d8f14079c3e9f8f11670894bec |
| linux | linux | >= 21420841a554dae8a193cd3454ba91d913cfc320 < bd0050b7ffa87c7b260d563646af612f4112a778 | bd0050b7ffa87c7b260d563646af612f4112a778 |
| linux | linux | >= 21420841a554dae8a193cd3454ba91d913cfc320 < 43acd767bd90c5d4172ce7fee5d9007a9a08dea9 | 43acd767bd90c5d4172ce7fee5d9007a9a08dea9 |
| linux | linux | >= 21420841a554dae8a193cd3454ba91d913cfc320 < ce4745a6b8016fae74c95dcd457d4ceef7d98af1 | ce4745a6b8016fae74c95dcd457d4ceef7d98af1 |
| linux | linux | >= 21420841a554dae8a193cd3454ba91d913cfc320 < 1417f59ac0b02130ee56c0c50794b9b257be3d17 | 1417f59ac0b02130ee56c0c50794b9b257be3d17 |
| linux | linux_kernel | < 4.19.272 | 4.19.272 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 4.20 < 5.4.231 | 5.4.231 |
| linux | linux_kernel | >= 5.11 < 5.15.92 | 5.15.92 |
| linux | linux_kernel | >= 5.16 < 6.1.10 | 6.1.10 |
| linux | linux_kernel | >= 5.5 < 5.10.167 | 5.10.167 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-49746: In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the funct
osv·2025-03-27·CVSS 5.5
CVE-2022-49746 [MEDIUM] CVE-2022-49746: In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the funct
In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed. We already met the sdma_load_context() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ... In this case, the desc->bd will not be freed without this change.
GHSA
GHSA-c2pc-4ww4-m54p: In the Linux kernel, the following vulnerability has been resolved:
dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
If the fun
ghsa_unreviewed·2025-03-27
CVE-2022-49746 [MEDIUM] CWE-401 GHSA-c2pc-4ww4-m54p: In the Linux kernel, the following vulnerability has been resolved:
dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
If the fun
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
If the function sdma_load_context() fails, the sdma_desc will be
freed, but the allocated desc->bd is forgot to be freed.
We already met the sdma_load_context() failure case and the log as
below:
[ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready
...
In this case, the desc->bd will not be freed without this change.
Red Hat
kernel: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
vendor_redhat·2025-03-27·CVSS 5.5
CVE-2022-49746 [MEDIUM] CWE-401 kernel: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
kernel: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
If the function sdma_load_context() fails, the sdma_desc will be
freed, but the allocated desc->bd is forgot to be freed.
We already met the sdma_load_context() failure case and the log as
below:
[ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready
...
In this case, the desc->bd will not be freed without this change.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not
Debian
CVE-2022-49746: linux - In the Linux kernel, the following vulnerability has been resolved: dmaengine: ...
vendor_debian·2022·CVSS 5.5
CVE-2022-49746 [MEDIUM] CVE-2022-49746: linux - In the Linux kernel, the following vulnerability has been resolved: dmaengine: ...
In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed. We already met the sdma_load_context() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ... In this case, the desc->bd will not be freed without this change.
Scope: local
bookworm: resolved (fixed in 6.1.11-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.11-1)
sid: resolved (fixed in 6.1.11-1)
trixie: resolved (fixed in 6.1.11-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1417f59ac0b02130ee56c0c50794b9b257be3d17https://git.kernel.org/stable/c/43acd767bd90c5d4172ce7fee5d9007a9a08dea9https://git.kernel.org/stable/c/80ee99e52936b2c04cc37b17a14b2ae2f9d282achttps://git.kernel.org/stable/c/bd0050b7ffa87c7b260d563646af612f4112a778https://git.kernel.org/stable/c/ce4745a6b8016fae74c95dcd457d4ceef7d98af1https://git.kernel.org/stable/c/dbe634ce824329d8f14079c3e9f8f11670894bec
2025-03-27
Published