CVE-2022-49746

MEDIUM

Linux Kernel < 4.19.272, 4.20.0-5.4.231, 5.5.0-5.10.167, 5.11.0-5.15.92, 5.16.0-6.1.10 - Use-After-Free

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed. We already met the sdma_load_context() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ... In this case, the desc->bd will not be freed without this change.

Scores

CVSS v3 5.5
EPSS 0.0017
EPSS Percentile 6.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (21)
linux/Kernel 4.19.0 - 4.19.272linux
linux/Kernel 4.20.0 - 5.4.231linux
linux/Kernel 5.11.0 - 5.15.92linux
linux/Kernel 5.16.0 - 6.1.10linux
linux/Kernel 5.5.0 - 5.10.167linux
Linux/Linux < 4.19
Linux/Linux 21420841a554dae8a193cd3454ba91d913cfc320 - 1417f59ac0b02130ee56c0c50794b9b257be3d17
Linux/Linux 21420841a554dae8a193cd3454ba91d913cfc320 - 43acd767bd90c5d4172ce7fee5d9007a9a08dea9
Linux/Linux 21420841a554dae8a193cd3454ba91d913cfc320 - 80ee99e52936b2c04cc37b17a14b2ae2f9d282ac
Linux/Linux 21420841a554dae8a193cd3454ba91d913cfc320 - bd0050b7ffa87c7b260d563646af612f4112a778
... and 11 more
Published Mar 27, 2025
Tracked Since Feb 18, 2026