In the Linux kernel, the following vulnerability has been resolved:
kernel/resource: fix kfree() of bootmem memory again
Since commit ebff7d8f270d ("mem hotunplug: fix kfree() of bootmem memory"), we could get a resource allocated during boot via allocresource(). And it's required to release the resource using freeresource(). Howerver, many people use kfree directly which will result in kernel BUG. In order to fix this without fixing every call site, just leak a couple of bytes in such corner case.
[
{
"id": "CVE-2022-49190-015594c6",
"target": {
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"187722173133603898868855659779195919960",
"92774650693152829566198108237027046833",
"162246546762051188444921365522790120834",
"308797874283605915250918515351503036491",
"117093912065163305391730510651504487830",
"216363930040351513550486963679497888439",
"92757296493768929755126453610763217432",
"66916423198430306060988231712360614146",
"339215278038992224853596165152720080549",
"178740042886489732717471759998396828233",
"44938796252968264127126358625706887043",
"140092216134781490901754134260870489479",
"197876419253294782888415987441689607536",
"333358850759885233101472113430080419900",
"15619212474853891482299905665716906253",
"325766275394620929751349420279317853484",
"271804116287582093856676075939990362591",
"326825662106048409955484433286162239214",
"65189703349805244587237079784801306811",
"1591077107955405335711350562533913166",
"250159389665521636676777479111461792852",
"129206028104598818439069308521166139291",
"113904736561792257723713570439357645694",
"116813267395838729149924807873734764674",
"232940620358442580737404410691320877535",
"10765477042145026331866537968289709654",
"275609493077238857953851108391986097900",
"35039272020253016927923989245748898745",
"209770312580356883718570369183801460376",
"157578951540707384167718477102566965751",
"193214051684413795881940106650945493297",
"106755002854906756884829095391818914831",
"123748407555287747449382453302549313434"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7faa04a44a0c37ac3d222fa8e0bdcbfcee9c0c8",
"signature_type": "Line"
},
{
"id": "CVE-2022-49190-039d02a8",
"target": {
"function": "alloc_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 363.0,
"function_hash": "117790516967081403719685669806958685672"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9e88c2618d228d7a4e7e515cf30dc0d0d813f27",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-2bfa009d",
"target": {
"function": "free_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 295.0,
"function_hash": "307539454356899116745161854986148976321"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9e88c2618d228d7a4e7e515cf30dc0d0d813f27",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-2c10bd52",
"target": {
"function": "free_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 295.0,
"function_hash": "307539454356899116745161854986148976321"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7faa04a44a0c37ac3d222fa8e0bdcbfcee9c0c8",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-45cf55f9",
"target": {
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"187722173133603898868855659779195919960",
"92774650693152829566198108237027046833",
"288835682194068106019175775237221039068",
"51155056774296698924724681005948858706",
"269953026569318623388135839255202704757",
"216363930040351513550486963679497888439",
"92757296493768929755126453610763217432",
"66916423198430306060988231712360614146",
"339215278038992224853596165152720080549",
"178740042886489732717471759998396828233",
"44938796252968264127126358625706887043",
"140092216134781490901754134260870489479",
"197876419253294782888415987441689607536",
"333358850759885233101472113430080419900",
"15619212474853891482299905665716906253",
"325766275394620929751349420279317853484",
"271804116287582093856676075939990362591",
"326825662106048409955484433286162239214",
"65189703349805244587237079784801306811",
"1591077107955405335711350562533913166",
"250159389665521636676777479111461792852",
"129206028104598818439069308521166139291",
"113904736561792257723713570439357645694",
"116813267395838729149924807873734764674",
"232940620358442580737404410691320877535",
"10765477042145026331866537968289709654",
"275609493077238857953851108391986097900",
"35039272020253016927923989245748898745",
"209770312580356883718570369183801460376",
"157578951540707384167718477102566965751",
"193214051684413795881940106650945493297",
"106755002854906756884829095391818914831",
"123748407555287747449382453302549313434"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3379a60f6bb4afcd9c456e340ac525ae649d3ce7",
"signature_type": "Line"
},
{
"id": "CVE-2022-49190-4b029422",
"target": {
"function": "free_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 295.0,
"function_hash": "307539454356899116745161854986148976321"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab86020070999e758ce2e60c4348f20bf7ddba56",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-54c73815",
"target": {
"function": "free_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 295.0,
"function_hash": "307539454356899116745161854986148976321"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3379a60f6bb4afcd9c456e340ac525ae649d3ce7",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-6365698f",
"target": {
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"187722173133603898868855659779195919960",
"92774650693152829566198108237027046833",
"162246546762051188444921365522790120834",
"308797874283605915250918515351503036491",
"117093912065163305391730510651504487830",
"216363930040351513550486963679497888439",
"92757296493768929755126453610763217432",
"66916423198430306060988231712360614146",
"339215278038992224853596165152720080549",
"178740042886489732717471759998396828233",
"44938796252968264127126358625706887043",
"140092216134781490901754134260870489479",
"197876419253294782888415987441689607536",
"333358850759885233101472113430080419900",
"15619212474853891482299905665716906253",
"325766275394620929751349420279317853484",
"271804116287582093856676075939990362591",
"326825662106048409955484433286162239214",
"65189703349805244587237079784801306811",
"1591077107955405335711350562533913166",
"250159389665521636676777479111461792852",
"129206028104598818439069308521166139291",
"113904736561792257723713570439357645694",
"116813267395838729149924807873734764674",
"232940620358442580737404410691320877535",
"10765477042145026331866537968289709654",
"275609493077238857953851108391986097900",
"35039272020253016927923989245748898745",
"209770312580356883718570369183801460376",
"157578951540707384167718477102566965751",
"193214051684413795881940106650945493297",
"106755002854906756884829095391818914831",
"123748407555287747449382453302549313434"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9e88c2618d228d7a4e7e515cf30dc0d0d813f27",
"signature_type": "Line"
},
{
"id": "CVE-2022-49190-659bf58f",
"target": {
"function": "alloc_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 363.0,
"function_hash": "117790516967081403719685669806958685672"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7faa04a44a0c37ac3d222fa8e0bdcbfcee9c0c8",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-79900fc2",
"target": {
"function": "free_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 295.0,
"function_hash": "307539454356899116745161854986148976321"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0cbcc92917c5de80f15c24d033566539ad696892",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-a398fbe4",
"target": {
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"187722173133603898868855659779195919960",
"92774650693152829566198108237027046833",
"162246546762051188444921365522790120834",
"308797874283605915250918515351503036491",
"117093912065163305391730510651504487830",
"216363930040351513550486963679497888439",
"92757296493768929755126453610763217432",
"66916423198430306060988231712360614146",
"339215278038992224853596165152720080549",
"178740042886489732717471759998396828233",
"44938796252968264127126358625706887043",
"140092216134781490901754134260870489479",
"197876419253294782888415987441689607536",
"333358850759885233101472113430080419900",
"15619212474853891482299905665716906253",
"325766275394620929751349420279317853484",
"271804116287582093856676075939990362591",
"326825662106048409955484433286162239214",
"65189703349805244587237079784801306811",
"1591077107955405335711350562533913166",
"250159389665521636676777479111461792852",
"129206028104598818439069308521166139291",
"113904736561792257723713570439357645694",
"116813267395838729149924807873734764674",
"232940620358442580737404410691320877535",
"10765477042145026331866537968289709654",
"275609493077238857953851108391986097900",
"35039272020253016927923989245748898745",
"209770312580356883718570369183801460376",
"157578951540707384167718477102566965751",
"193214051684413795881940106650945493297",
"106755002854906756884829095391818914831",
"123748407555287747449382453302549313434"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0cbcc92917c5de80f15c24d033566539ad696892",
"signature_type": "Line"
},
{
"id": "CVE-2022-49190-b34eeedf",
"target": {
"function": "alloc_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 363.0,
"function_hash": "117790516967081403719685669806958685672"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3379a60f6bb4afcd9c456e340ac525ae649d3ce7",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-c9e30139",
"target": {
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"187722173133603898868855659779195919960",
"92774650693152829566198108237027046833",
"162246546762051188444921365522790120834",
"308797874283605915250918515351503036491",
"117093912065163305391730510651504487830",
"216363930040351513550486963679497888439",
"92757296493768929755126453610763217432",
"66916423198430306060988231712360614146",
"339215278038992224853596165152720080549",
"178740042886489732717471759998396828233",
"44938796252968264127126358625706887043",
"140092216134781490901754134260870489479",
"197876419253294782888415987441689607536",
"333358850759885233101472113430080419900",
"15619212474853891482299905665716906253",
"325766275394620929751349420279317853484",
"271804116287582093856676075939990362591",
"326825662106048409955484433286162239214",
"65189703349805244587237079784801306811",
"1591077107955405335711350562533913166",
"250159389665521636676777479111461792852",
"129206028104598818439069308521166139291",
"113904736561792257723713570439357645694",
"116813267395838729149924807873734764674",
"232940620358442580737404410691320877535",
"10765477042145026331866537968289709654",
"275609493077238857953851108391986097900",
"35039272020253016927923989245748898745",
"209770312580356883718570369183801460376",
"157578951540707384167718477102566965751",
"193214051684413795881940106650945493297",
"106755002854906756884829095391818914831",
"123748407555287747449382453302549313434"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab86020070999e758ce2e60c4348f20bf7ddba56",
"signature_type": "Line"
},
{
"id": "CVE-2022-49190-cbc43804",
"target": {
"function": "alloc_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 363.0,
"function_hash": "117790516967081403719685669806958685672"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab86020070999e758ce2e60c4348f20bf7ddba56",
"signature_type": "Function"
},
{
"id": "CVE-2022-49190-cc39a416",
"target": {
"function": "alloc_resource",
"file": "kernel/resource.c"
},
"signature_version": "v1",
"digest": {
"length": 363.0,
"function_hash": "117790516967081403719685669806958685672"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0cbcc92917c5de80f15c24d033566539ad696892",
"signature_type": "Function"
}
]