In the Linux kernel, the following vulnerability has been resolved:
remoteproc: qcomq6v5mss: Fix some leaks in q6v5allocmemory_region
The devicenode pointer is returned by ofparsephandle() or ofgetchildbyname() with refcount incremented. We should use ofnode_put() on it when done.
This function only call ofnodeput(node) when ofaddressto_resource succeeds, missing error cases.
[
{
"id": "CVE-2022-49188-06cf5a7b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07a5dcc4bed9d7cae54adf5aa10ff9f037a3204b",
"digest": {
"line_hashes": [
"106824461919769107579756639881731606902",
"249377260412303354013775850110805780991",
"189714474119469489796586120100698647337",
"291680623001758983156614270332021891190",
"196826369212680465564504157391211207800",
"152303316532165321438950953139846147414",
"106652784583910702387737504138940058401",
"62841911131322940229835313580796845223",
"137512882845416101625976553176116765846",
"293020984362883396632122059232366809670",
"340038513665300705189634424803030781997",
"31568329539169486747481214264321983634",
"84680799204679621487261991416436567053",
"62434288724091306378636494799068846072",
"131212417899800956664970901622763650310",
"194728898167404514364951315546464025494",
"148606510862743517864178186020405899992",
"181622770818613488707091553876841751098",
"309419166386474884576316418796495888139",
"161461961236673117068232589365790594571",
"140424097142637683391436212746028780085",
"228565317043811715125041060151854586278",
"139931783779975774731732860061931807959",
"128056496282028612839336405995307471721",
"335935934069868141093306336078794944098"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49188-6a35aebb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9df3007b3cda4936cc50f5a7d2d30505a652828",
"digest": {
"line_hashes": [
"106824461919769107579756639881731606902",
"249377260412303354013775850110805780991",
"189714474119469489796586120100698647337",
"291680623001758983156614270332021891190",
"196826369212680465564504157391211207800",
"152303316532165321438950953139846147414",
"106652784583910702387737504138940058401",
"62841911131322940229835313580796845223",
"137512882845416101625976553176116765846",
"293020984362883396632122059232366809670",
"340038513665300705189634424803030781997",
"31568329539169486747481214264321983634",
"84680799204679621487261991416436567053",
"62434288724091306378636494799068846072",
"131212417899800956664970901622763650310",
"194728898167404514364951315546464025494",
"148606510862743517864178186020405899992",
"181622770818613488707091553876841751098",
"309419166386474884576316418796495888139",
"161461961236673117068232589365790594571",
"140424097142637683391436212746028780085",
"228565317043811715125041060151854586278",
"139931783779975774731732860061931807959",
"128056496282028612839336405995307471721",
"335935934069868141093306336078794944098"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49188-927a46c8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07a5dcc4bed9d7cae54adf5aa10ff9f037a3204b",
"digest": {
"length": 954.0,
"function_hash": "146720588676891984092408644077334349770"
},
"signature_version": "v1",
"target": {
"function": "q6v5_alloc_memory_region",
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49188-9766b8e7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd4771ba2cf9e18473a42b5b70175e50d67a64bb",
"digest": {
"length": 954.0,
"function_hash": "146720588676891984092408644077334349770"
},
"signature_version": "v1",
"target": {
"function": "q6v5_alloc_memory_region",
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49188-a2d5f86f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7210ca29a783c94478da02368731e4c9cf7cdb7",
"digest": {
"length": 1201.0,
"function_hash": "289930036445875145705672525553978385604"
},
"signature_version": "v1",
"target": {
"function": "q6v5_alloc_memory_region",
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49188-b47dd56e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9df3007b3cda4936cc50f5a7d2d30505a652828",
"digest": {
"length": 954.0,
"function_hash": "146720588676891984092408644077334349770"
},
"signature_version": "v1",
"target": {
"function": "q6v5_alloc_memory_region",
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49188-c83734aa",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7d988735e757e111f9722de7cf1b40a84a48b1f",
"digest": {
"length": 954.0,
"function_hash": "146720588676891984092408644077334349770"
},
"signature_version": "v1",
"target": {
"function": "q6v5_alloc_memory_region",
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49188-d7046424",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd4771ba2cf9e18473a42b5b70175e50d67a64bb",
"digest": {
"line_hashes": [
"106824461919769107579756639881731606902",
"249377260412303354013775850110805780991",
"189714474119469489796586120100698647337",
"291680623001758983156614270332021891190",
"196826369212680465564504157391211207800",
"152303316532165321438950953139846147414",
"106652784583910702387737504138940058401",
"62841911131322940229835313580796845223",
"137512882845416101625976553176116765846",
"293020984362883396632122059232366809670",
"340038513665300705189634424803030781997",
"31568329539169486747481214264321983634",
"84680799204679621487261991416436567053",
"62434288724091306378636494799068846072",
"131212417899800956664970901622763650310",
"194728898167404514364951315546464025494",
"148606510862743517864178186020405899992",
"181622770818613488707091553876841751098",
"309419166386474884576316418796495888139",
"161461961236673117068232589365790594571",
"140424097142637683391436212746028780085",
"228565317043811715125041060151854586278",
"139931783779975774731732860061931807959",
"128056496282028612839336405995307471721",
"335935934069868141093306336078794944098"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49188-e2eec299",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7d988735e757e111f9722de7cf1b40a84a48b1f",
"digest": {
"line_hashes": [
"106824461919769107579756639881731606902",
"249377260412303354013775850110805780991",
"189714474119469489796586120100698647337",
"291680623001758983156614270332021891190",
"196826369212680465564504157391211207800",
"152303316532165321438950953139846147414",
"106652784583910702387737504138940058401",
"62841911131322940229835313580796845223",
"137512882845416101625976553176116765846",
"293020984362883396632122059232366809670",
"340038513665300705189634424803030781997",
"31568329539169486747481214264321983634",
"84680799204679621487261991416436567053",
"62434288724091306378636494799068846072",
"131212417899800956664970901622763650310",
"194728898167404514364951315546464025494",
"148606510862743517864178186020405899992",
"181622770818613488707091553876841751098",
"309419166386474884576316418796495888139",
"161461961236673117068232589365790594571",
"140424097142637683391436212746028780085",
"228565317043811715125041060151854586278",
"139931783779975774731732860061931807959",
"128056496282028612839336405995307471721",
"335935934069868141093306336078794944098"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49188-f6e64ebd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7210ca29a783c94478da02368731e4c9cf7cdb7",
"digest": {
"line_hashes": [
"106824461919769107579756639881731606902",
"249377260412303354013775850110805780991",
"189714474119469489796586120100698647337",
"291680623001758983156614270332021891190",
"196826369212680465564504157391211207800",
"152303316532165321438950953139846147414",
"106652784583910702387737504138940058401",
"62841911131322940229835313580796845223",
"137512882845416101625976553176116765846",
"293020984362883396632122059232366809670",
"340038513665300705189634424803030781997",
"31568329539169486747481214264321983634",
"84680799204679621487261991416436567053",
"35988216984361203772055958274297901202",
"131212417899800956664970901622763650310",
"194728898167404514364951315546464025494",
"148606510862743517864178186020405899992",
"181622770818613488707091553876841751098",
"309419166386474884576316418796495888139",
"161461961236673117068232589365790594571",
"140424097142637683391436212746028780085",
"228565317043811715125041060151854586278",
"139931783779975774731732860061931807959",
"128056496282028612839336405995307471721",
"335935934069868141093306336078794944098"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/remoteproc/qcom_q6v5_mss.c"
},
"signature_type": "Line",
"deprecated": false
}
]