CVE-2022-49653

The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that releaseresource() merely removes the resource from the tree but does not free its memory. We need to call releasemem_region() instead, which does free the memory. As a nice side effect, this brings back some symmetry between the legacy and MMIO paths.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

4b965566ca26e83553d92b8c57050e5d59911806

Fixed

d2bf1a6480e8d44658a8ac3bdcec081238873212

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

7c148722d074c29fb998578eea5de3c14b9608c9

Fixed

a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

7c148722d074c29fb998578eea5de3c14b9608c9

Fixed

8ad59b397f86a4d8014966fdc0552095a0c4fb2b

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

f48190bca4b1a397f2e050efea2c8e8e72049ec8

Affected versions

v5.*

v5.10.1

v5.10.10

v5.10.11

v5.10.12

v5.10.13

v5.10.14

v5.10.15

v5.10.16

v5.10.17

v5.10.18

v5.10.19

v5.10.2

v5.10.3

v5.10.4

v5.10.5

v5.10.6

v5.10.7

v5.10.8

v5.10.9

v5.11.1

v5.11.10

v5.11.11

v5.11.12

v5.11.13

v5.11.14

v5.11.15

v5.11.16

v5.11.17

v5.11.18

v5.11.19

v5.11.2

v5.11.20

v5.11.21

v5.11.3

v5.11.4

v5.11.5

v5.11.6

v5.11.7

v5.11.8

v5.11.9

v5.12.1

v5.12.10

v5.12.11

v5.12.12

v5.12.13

v5.12.14

v5.12.15

v5.12.16

v5.12.17

v5.12.18

v5.12.19

v5.12.2

v5.12.3

v5.12.4

v5.12.5

v5.12.6

v5.12.7

v5.12.8

v5.12.9

v5.13.1

v5.13.10

v5.13.11

v5.13.12

v5.13.13

v5.13.14

v5.13.15

v5.13.16

v5.13.17

v5.13.18

v5.13.2

v5.13.3

v5.13.4

v5.13.5

v5.13.6

v5.13.7

v5.13.8

v5.13.9

v5.14.1

v5.14.10

v5.14.11

v5.14.12

v5.14.13

v5.14.14

v5.14.15

v5.14.16

v5.14.17

v5.14.18

v5.14.19

v5.14.2

v5.14.20

v5.14.3

v5.14.4

v5.14.5

v5.14.6

v5.14.7

v5.14.8

v5.14.9

v5.15.1

v5.15.10

v5.15.11

v5.15.12

v5.15.13

v5.15.14

v5.15.15

v5.15.16

v5.15.17

v5.15.18

v5.15.19

v5.15.2

v5.15.3

v5.15.4

v5.15.42

v5.15.43

v5.15.44

v5.15.45

v5.15.46

v5.15.47

v5.15.48

v5.15.49

v5.15.5

v5.15.50

v5.15.51

v5.15.52

v5.15.53

v5.15.6

v5.15.7

v5.15.8

v5.15.9

v5.16.1

v5.16.10

v5.16.11

v5.16.12

v5.16.13

v5.16.14

v5.16.15

v5.16.16

v5.16.17

v5.16.18

v5.16.19

v5.16.2

v5.16.20

v5.16.3

v5.16.4

v5.16.5

v5.16.6

v5.16.7

v5.16.8

v5.16.9

v5.17

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.17.10

v5.17.11

v5.17.12

v5.17.13

v5.17.14

v5.17.15

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.18.1

v5.18.10

v5.18.11

v5.18.12

v5.18.13

v5.18.14

v5.18.15

v5.18.16

v5.18.17

v5.18.18

v5.18.19

v5.18.2

v5.18.3

v5.18.4

v5.18.5

v5.18.6

v5.18.7

v5.18.8

v5.18.9

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.19.1

v5.19.10

v5.19.11

v5.19.12

v5.19.13

v5.19.14

v5.19.15

v5.19.16

v5.19.2

v5.19.3

v5.19.4

v5.19.5

v5.19.6

v5.19.7

v5.19.8

v5.19.9

v5.6.1

v5.6.10

v5.6.11

v5.6.12

v5.6.13

v5.6.14

v5.6.15

v5.6.16

v5.6.17

v5.6.18

v5.6.2

v5.6.3

v5.6.4

v5.6.5

v5.6.6

v5.6.7

v5.6.8

v5.6.9

v5.7.1

v5.7.10

v5.7.11

v5.7.12

v5.7.13

v5.7.14

v5.7.15

v5.7.16

v5.7.2

v5.7.3

v5.7.4

v5.7.5

v5.7.6

v5.7.7

v5.7.8

v5.7.9

v5.8.1

v5.8.10

v5.8.11

v5.8.12

v5.8.13

v5.8.14

v5.8.15

v5.8.16

v5.8.17

v5.8.18

v5.8.2

v5.8.3

v5.8.4

v5.8.5

v5.8.6

v5.8.7

v5.8.8

v5.8.9

v5.9.1

v5.9.10

v5.9.11

v5.9.12

v5.9.13

v5.9.14

v5.9.15

v5.9.16

v5.9.2

v5.9.3

v5.9.4

v5.9.5

v5.9.6

v5.9.7

v5.9.8

v5.9.9

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.0.1

v6.0.10

v6.0.11

v6.0.12

v6.0.13

v6.0.14

v6.0.15

v6.0.16

v6.0.17

v6.0.18

v6.0.2

v6.0.3

v6.0.4

v6.0.5

v6.0.6

v6.0.7

v6.0.8

v6.0.9

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.2

v6.1.3

v6.1.4

v6.1.5

v6.1.6

v6.1.7

v6.1.8

v6.1.9

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.10.1

v6.10.10

v6.10.11

v6.10.12

v6.10.13

v6.10.2

v6.10.3

v6.10.4

v6.10.5

v6.10.6

v6.10.7

v6.10.8

v6.10.9

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.11.1

v6.11.10

v6.11.11

v6.11.2

v6.11.3

v6.11.4

v6.11.5

v6.11.6

v6.11.7

v6.11.8

v6.11.9

v6.12

v6.12-rc1

v6.12-rc2

v6.12-rc3

v6.12-rc4

v6.12-rc5

v6.12-rc6

v6.12-rc7

v6.12.1

v6.12.10

v6.12.11

v6.12.12

v6.12.13

v6.12.14

v6.12.2

v6.12.3

v6.12.4

v6.12.5

v6.12.6

v6.12.7

v6.12.8

v6.12.9

v6.13

v6.13-rc1

v6.13-rc2

v6.13-rc3

v6.13-rc4

v6.13-rc5

v6.13-rc6

v6.13-rc7

v6.13.1

v6.13.10

v6.13.11

v6.13.12

v6.13.2

v6.13.3

v6.13.4

v6.13.5

v6.13.6

v6.13.7

v6.13.8

v6.13.9

v6.14

v6.14-rc1

v6.14-rc2

v6.14-rc3

v6.14-rc4

v6.14-rc5

v6.14-rc6

v6.14-rc7

v6.14.1

v6.14.10

v6.14.11

v6.14.2

v6.14.3

v6.14.4

v6.14.5

v6.14.6

v6.14.7

v6.14.8

v6.14.9

v6.15

v6.15-rc1

v6.15-rc2

v6.15-rc3

v6.15-rc4

v6.15-rc5

v6.15-rc6

v6.15-rc7

v6.15.1

v6.15.10

v6.15.11

v6.15.2

v6.15.3

v6.15.4

v6.15.5

v6.15.6

v6.15.7

v6.15.8

v6.15.9

v6.16

v6.16-rc1

v6.16-rc2

v6.16-rc3

v6.16-rc4

v6.16-rc5

v6.16-rc6

v6.16-rc7

v6.16.1

v6.16.10

v6.16.11

v6.16.12

v6.16.2

v6.16.3

v6.16.4

v6.16.5

v6.16.6

v6.16.7

v6.16.8

v6.16.9

v6.17

v6.17-rc1

v6.17-rc2

v6.17-rc3

v6.17-rc4

v6.17-rc5

v6.17-rc6

v6.17-rc7

v6.17.1

v6.17.2

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.2.1

v6.2.10

v6.2.11

v6.2.12

v6.2.13

v6.2.14

v6.2.15

v6.2.2

v6.2.3

v6.2.4

v6.2.5

v6.2.6

v6.2.7

v6.2.8

v6.2.9

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.3.1

v6.3.10

v6.3.11

v6.3.12

v6.3.2

v6.3.3

v6.3.4

v6.3.5

v6.3.6

v6.3.7

v6.3.8

v6.3.9

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.4.1

v6.4.10

v6.4.11

v6.4.12

v6.4.13

v6.4.14

v6.4.15

v6.4.16

v6.4.2

v6.4.3

v6.4.4

v6.4.5

v6.4.6

v6.4.7

v6.4.8

v6.4.9

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.5.1

v6.5.10

v6.5.11

v6.5.12

v6.5.13

v6.5.2

v6.5.3

v6.5.4

v6.5.5

v6.5.6

v6.5.7

v6.5.8

v6.5.9

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.2

v6.6.3

v6.6.4

v6.6.5

v6.6.6

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.7.1

v6.7.10

v6.7.11

v6.7.2

v6.7.3

v6.7.4

v6.7.5

v6.7.6

v6.7.7

v6.7.8

v6.7.9

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.8.1

v6.8.10

v6.8.11

v6.8.2

v6.8.3

v6.8.4

v6.8.5

v6.8.6

v6.8.7

v6.8.8

v6.8.9

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

v6.9.1

v6.9.10

v6.9.11

v6.9.12

v6.9.2

v6.9.3

v6.9.4

v6.9.5

v6.9.6

v6.9.7

v6.9.8

v6.9.9

Database specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "11118736331903107305136152199473162296",
                    "153706298176245263967994274119899681744",
                    "257067732512732611501325148506972013639",
                    "87350068920281945819519875647459932227",
                    "328086606166073814994050414474182068629",
                    "42043970916694242302224289600620299117",
                    "242968651745227441095843682327942096982",
                    "207036317281973816456412339475311983723",
                    "290852121992831283255881800612765334778",
                    "161886032344855139596401899628384923111",
                    "79777217804027368651965730465627348704",
                    "56399495227302690359652316992905596454",
                    "199393635713753494903029567643390036190",
                    "7473296554979719498957711185297981500",
                    "221383615678547644347392383218323424818",
                    "206147003501827334370668885901271233800",
                    "328944327955310771629963887757359890900",
                    "83237275695587451731631177942508488727",
                    "66651703062666815093149749095628823884",
                    "53203080847229896143767520763109475650",
                    "113791930562298865886790423663811881210",
                    "303763562808955284160680635640604745165",
                    "247807235433798726078666790724321671993",
                    "19557211368247956862629072916915250332",
                    "245289581468815748341651307971675378294"
                ]
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad59b397f86a4d8014966fdc0552095a0c4fb2b",
            "signature_version": "v1",
            "id": "CVE-2022-49653-05971eab",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 216.0,
                "function_hash": "79194694176818921690798334481853346051"
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c",
                "function": "piix4_sb800_region_release"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad59b397f86a4d8014966fdc0552095a0c4fb2b",
            "signature_version": "v1",
            "id": "CVE-2022-49653-11cfaaf6",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 811.0,
                "function_hash": "116836196664735279054450167651578867689"
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c",
                "function": "piix4_sb800_region_request"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad59b397f86a4d8014966fdc0552095a0c4fb2b",
            "signature_version": "v1",
            "id": "CVE-2022-49653-1678a142",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "11118736331903107305136152199473162296",
                    "153706298176245263967994274119899681744",
                    "257067732512732611501325148506972013639",
                    "87350068920281945819519875647459932227",
                    "328086606166073814994050414474182068629",
                    "42043970916694242302224289600620299117",
                    "242968651745227441095843682327942096982",
                    "207036317281973816456412339475311983723",
                    "290852121992831283255881800612765334778",
                    "161886032344855139596401899628384923111",
                    "79777217804027368651965730465627348704",
                    "56399495227302690359652316992905596454",
                    "199393635713753494903029567643390036190",
                    "7473296554979719498957711185297981500",
                    "221383615678547644347392383218323424818",
                    "206147003501827334370668885901271233800",
                    "328944327955310771629963887757359890900",
                    "83237275695587451731631177942508488727",
                    "66651703062666815093149749095628823884",
                    "53203080847229896143767520763109475650",
                    "113791930562298865886790423663811881210",
                    "303763562808955284160680635640604745165",
                    "247807235433798726078666790724321671993",
                    "19557211368247956862629072916915250332",
                    "245289581468815748341651307971675378294"
                ]
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2bf1a6480e8d44658a8ac3bdcec081238873212",
            "signature_version": "v1",
            "id": "CVE-2022-49653-2060193c",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 811.0,
                "function_hash": "116836196664735279054450167651578867689"
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c",
                "function": "piix4_sb800_region_request"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2bf1a6480e8d44658a8ac3bdcec081238873212",
            "signature_version": "v1",
            "id": "CVE-2022-49653-2a4b4668",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 811.0,
                "function_hash": "116836196664735279054450167651578867689"
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c",
                "function": "piix4_sb800_region_request"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19",
            "signature_version": "v1",
            "id": "CVE-2022-49653-52209509",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 216.0,
                "function_hash": "79194694176818921690798334481853346051"
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c",
                "function": "piix4_sb800_region_release"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2bf1a6480e8d44658a8ac3bdcec081238873212",
            "signature_version": "v1",
            "id": "CVE-2022-49653-a9cf4fcc",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "11118736331903107305136152199473162296",
                    "153706298176245263967994274119899681744",
                    "257067732512732611501325148506972013639",
                    "87350068920281945819519875647459932227",
                    "328086606166073814994050414474182068629",
                    "42043970916694242302224289600620299117",
                    "242968651745227441095843682327942096982",
                    "207036317281973816456412339475311983723",
                    "290852121992831283255881800612765334778",
                    "161886032344855139596401899628384923111",
                    "79777217804027368651965730465627348704",
                    "56399495227302690359652316992905596454",
                    "199393635713753494903029567643390036190",
                    "7473296554979719498957711185297981500",
                    "221383615678547644347392383218323424818",
                    "206147003501827334370668885901271233800",
                    "328944327955310771629963887757359890900",
                    "83237275695587451731631177942508488727",
                    "66651703062666815093149749095628823884",
                    "53203080847229896143767520763109475650",
                    "113791930562298865886790423663811881210",
                    "303763562808955284160680635640604745165",
                    "247807235433798726078666790724321671993",
                    "19557211368247956862629072916915250332",
                    "245289581468815748341651307971675378294"
                ]
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19",
            "signature_version": "v1",
            "id": "CVE-2022-49653-ce791577",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 216.0,
                "function_hash": "79194694176818921690798334481853346051"
            },
            "target": {
                "file": "drivers/i2c/busses/i2c-piix4.c",
                "function": "piix4_sb800_region_release"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19",
            "signature_version": "v1",
            "id": "CVE-2022-49653-d64f62a9",
            "signature_type": "Function"
        }
    ]
}

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.54

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

5.18.11