In the Linux kernel, the following vulnerability has been resolved:
dmaengine: imx-sdma: Fix a possible memory leak in sdmatransferinit
If the function sdmaloadcontext() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed.
We already met the sdmaloadcontext() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ...
In this case, the desc->bd will not be freed without this change.
[
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@80ee99e52936b2c04cc37b17a14b2ae2f9d282ac",
"target": {
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"line_hashes": [
"164438843286751186560062260531544623589",
"257947020705127690547570458846621031965",
"26600701207495172537054532532495753115",
"78175308108547507138604792102853869771",
"256177724454850147805773216005686379890"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49746-00900d5d"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1417f59ac0b02130ee56c0c50794b9b257be3d17",
"target": {
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"line_hashes": [
"164438843286751186560062260531544623589",
"257947020705127690547570458846621031965",
"26600701207495172537054532532495753115",
"78175308108547507138604792102853869771",
"256177724454850147805773216005686379890"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49746-46214b57"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@80ee99e52936b2c04cc37b17a14b2ae2f9d282ac",
"target": {
"function": "sdma_transfer_init",
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"function_hash": "121576564189789118203634159903402363473",
"length": 631.0
},
"signature_type": "Function",
"id": "CVE-2022-49746-4899a2ab"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd0050b7ffa87c7b260d563646af612f4112a778",
"target": {
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"line_hashes": [
"164438843286751186560062260531544623589",
"257947020705127690547570458846621031965",
"26600701207495172537054532532495753115",
"78175308108547507138604792102853869771",
"256177724454850147805773216005686379890"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49746-542f5205"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd0050b7ffa87c7b260d563646af612f4112a778",
"target": {
"function": "sdma_transfer_init",
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"function_hash": "121576564189789118203634159903402363473",
"length": 631.0
},
"signature_type": "Function",
"id": "CVE-2022-49746-62becc7c"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce4745a6b8016fae74c95dcd457d4ceef7d98af1",
"target": {
"function": "sdma_transfer_init",
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"function_hash": "88416321220064206546640039114077328065",
"length": 779.0
},
"signature_type": "Function",
"id": "CVE-2022-49746-7a831e58"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43acd767bd90c5d4172ce7fee5d9007a9a08dea9",
"target": {
"function": "sdma_transfer_init",
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"function_hash": "88416321220064206546640039114077328065",
"length": 779.0
},
"signature_type": "Function",
"id": "CVE-2022-49746-7c54f099"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dbe634ce824329d8f14079c3e9f8f11670894bec",
"target": {
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"line_hashes": [
"164438843286751186560062260531544623589",
"257947020705127690547570458846621031965",
"26600701207495172537054532532495753115",
"78175308108547507138604792102853869771",
"256177724454850147805773216005686379890"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49746-ced4ad64"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce4745a6b8016fae74c95dcd457d4ceef7d98af1",
"target": {
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"line_hashes": [
"164438843286751186560062260531544623589",
"257947020705127690547570458846621031965",
"26600701207495172537054532532495753115",
"78175308108547507138604792102853869771",
"256177724454850147805773216005686379890"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49746-e784e77e"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1417f59ac0b02130ee56c0c50794b9b257be3d17",
"target": {
"function": "sdma_transfer_init",
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"function_hash": "88416321220064206546640039114077328065",
"length": 779.0
},
"signature_type": "Function",
"id": "CVE-2022-49746-f369e25d"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43acd767bd90c5d4172ce7fee5d9007a9a08dea9",
"target": {
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"line_hashes": [
"164438843286751186560062260531544623589",
"257947020705127690547570458846621031965",
"26600701207495172537054532532495753115",
"78175308108547507138604792102853869771",
"256177724454850147805773216005686379890"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49746-f7c28af7"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dbe634ce824329d8f14079c3e9f8f11670894bec",
"target": {
"function": "sdma_transfer_init",
"file": "drivers/dma/imx-sdma.c"
},
"digest": {
"function_hash": "121576564189789118203634159903402363473",
"length": 631.0
},
"signature_type": "Function",
"id": "CVE-2022-49746-fd6ae657"
}
]