CVE-2022-49746
MEDIUMLinux Kernel < 4.19.272, 4.20.0-5.4.231, 5.5.0-5.10.167, 5.11.0-5.15.92, 5.16.0-6.1.10 - Use-After-Free
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed. We already met the sdma_load_context() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ... In this case, the desc->bd will not be freed without this change.
References (6)
Core 6
Core References
Scores
CVSS v3
5.5
EPSS
0.0017
EPSS Percentile
6.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-401
Status
published
Products (21)
linux/Kernel
4.19.0 - 4.19.272linux
linux/Kernel
4.20.0 - 5.4.231linux
linux/Kernel
5.11.0 - 5.15.92linux
linux/Kernel
5.16.0 - 6.1.10linux
linux/Kernel
5.5.0 - 5.10.167linux
Linux/Linux
< 4.19
Linux/Linux
21420841a554dae8a193cd3454ba91d913cfc320 - 1417f59ac0b02130ee56c0c50794b9b257be3d17
Linux/Linux
21420841a554dae8a193cd3454ba91d913cfc320 - 43acd767bd90c5d4172ce7fee5d9007a9a08dea9
Linux/Linux
21420841a554dae8a193cd3454ba91d913cfc320 - 80ee99e52936b2c04cc37b17a14b2ae2f9d282ac
Linux/Linux
21420841a554dae8a193cd3454ba91d913cfc320 - bd0050b7ffa87c7b260d563646af612f4112a778
... and 11 more
Published
Mar 27, 2025
Tracked Since
Feb 18, 2026