ZeroHour

CVE-2022-49927

CVSS 3.1
5.5 medium
EPSS
<1%p10
Published
()
Modified
Description

In the Linux kernel, the following vulnerability has been resolved: nfs4: Fix kmemleak when allocate slot failed If one of the slot allocate failed, should cleanup all the other allocated slots, otherwise, the allocated slots will leak: unreferenced object 0xffff8881115aa100 (size 64): comm ""mount.nfs"", pid 679, jiffies 4294744957 (age 115.037s) hex dump (first 32 bytes): 00 cc 19 73 81 88 ff ff 00 a0 5a 11 81 88 ff ff ...s......Z..... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [ ] nfs4_find_or_create_slot+0x8e/0x130 [ ] nfs4_realloc_slot_table+0x23f/0x270 [ ] nfs40_init_client+0x4a/0x90 [ ] nfs4_init_client+0xce/0x270 [ ] nfs4_set_client+0x1a2/0x2b0 [ ] nfs4_create_server+0x300/0x5f0 [ ] nfs4_try_get_tree+0x65/0x110 [ ] vfs_get_tree+0x41/0xf0 [ ] path_mount+0x9b3/0xdd0 [ ] __x64_sys_mount+0x190/0x1d0 [ ] do_syscall_64+0x35/0x80 [ ] entry_SYSCALL_64_after_hwframe+0x46/0xb0

Vendors
linux
Products
linux kernel
Weakness
CWE-401
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.