In the Linux kernel, the following vulnerability has been resolved:
iio: trigger: sysfs: fix possible memory leak in iiosysfstrig_init()
devsetname() allocates memory for name, it need be freed when deviceadd() fails, call putdevice() to give up the reference that hold in deviceinitialize(), so that it can be freed in kobjectcleanup() when the refcount hit to 0.
Fault injection test can trigger this:
unreferenced object 0xffff8e8340a7b4c0 (size 32): comm "modprobe", pid 243, jiffies 4294678145 (age 48.845s) hex dump (first 32 bytes): 69 69 6f 5f 73 79 73 66 73 5f 74 72 69 67 67 65 iiosysfstrigge 72 00 a7 40 83 8e ff ff 00 86 13 c4 f6 ee ff ff r..@............ backtrace: [<0000000074999de8>] _kmemcacheallocnode+0x1e9/0x360 [<00000000497fd30b>] _kmallocnodetrackcaller+0x44/0x1a0 [<000000003636c520>] kstrdup+0x2d/0x60 [<0000000032f84da2>] kobjectsetnamevargs+0x1e/0x90 [<0000000092efe493>] devset_name+0x4e/0x70
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68c96821b61d2c71a35dbb8bf90c347fad624d9",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iio_sysfs_trig_init",
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-08353b74",
"digest": {
"length": 172.0,
"function_hash": "125145800489877428159401838794027210979"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2c4e65285bdea23fd36d2ff376006ac64db6f42e",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-3c38165e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338008519857065008847818629708931191553",
"147974689103036263870916484340527907541",
"29677424847638785143383181659481854160",
"137221773149880296580861473697245410770",
"315744989149095235374708571526363260062",
"279314652007825070266718801127757726744",
"154398591453817848442135816458616787398"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2c4e65285bdea23fd36d2ff376006ac64db6f42e",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iio_sysfs_trig_init",
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-549bd71c",
"digest": {
"length": 172.0,
"function_hash": "125145800489877428159401838794027210979"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8dddf2699da296c84205582aaead6b43dd7e8c4b",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-59f83fee",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338008519857065008847818629708931191553",
"147974689103036263870916484340527907541",
"29677424847638785143383181659481854160",
"137221773149880296580861473697245410770",
"315744989149095235374708571526363260062",
"279314652007825070266718801127757726744",
"154398591453817848442135816458616787398"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68c96821b61d2c71a35dbb8bf90c347fad624d9",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-6716236b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338008519857065008847818629708931191553",
"147974689103036263870916484340527907541",
"29677424847638785143383181659481854160",
"137221773149880296580861473697245410770",
"315744989149095235374708571526363260062",
"279314652007825070266718801127757726744",
"154398591453817848442135816458616787398"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a39382aa5411d64b25a71516c2c7480aab13bb7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-6f098079",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338008519857065008847818629708931191553",
"147974689103036263870916484340527907541",
"29677424847638785143383181659481854160",
"137221773149880296580861473697245410770",
"315744989149095235374708571526363260062",
"279314652007825070266718801127757726744",
"154398591453817848442135816458616787398"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b47bb521961f027b4dcf8683337a7a1ba9e5ea1f",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-7a3c0b75",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338008519857065008847818629708931191553",
"147974689103036263870916484340527907541",
"29677424847638785143383181659481854160",
"137221773149880296580861473697245410770",
"315744989149095235374708571526363260062",
"279314652007825070266718801127757726744",
"154398591453817848442135816458616787398"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8dddf2699da296c84205582aaead6b43dd7e8c4b",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iio_sysfs_trig_init",
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-85495336",
"digest": {
"length": 172.0,
"function_hash": "125145800489877428159401838794027210979"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0dd52e141afde089304de470148d311b05c14564",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-9d95f6d3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338008519857065008847818629708931191553",
"147974689103036263870916484340527907541",
"29677424847638785143383181659481854160",
"137221773149880296580861473697245410770",
"315744989149095235374708571526363260062",
"279314652007825070266718801127757726744",
"154398591453817848442135816458616787398"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@656f670613662b6cc77aad14112db2803ad18fa8",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-a020ff17",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338008519857065008847818629708931191553",
"147974689103036263870916484340527907541",
"29677424847638785143383181659481854160",
"137221773149880296580861473697245410770",
"315744989149095235374708571526363260062",
"279314652007825070266718801127757726744",
"154398591453817848442135816458616787398"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0dd52e141afde089304de470148d311b05c14564",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iio_sysfs_trig_init",
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-c4669f4d",
"digest": {
"length": 172.0,
"function_hash": "125145800489877428159401838794027210979"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@efa17e90e1711bdb084e3954fa44afb6647331c0",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-d20c72bf",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338008519857065008847818629708931191553",
"147974689103036263870916484340527907541",
"29677424847638785143383181659481854160",
"137221773149880296580861473697245410770",
"315744989149095235374708571526363260062",
"279314652007825070266718801127757726744",
"154398591453817848442135816458616787398"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@656f670613662b6cc77aad14112db2803ad18fa8",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iio_sysfs_trig_init",
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-e79b6541",
"digest": {
"length": 172.0,
"function_hash": "125145800489877428159401838794027210979"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a39382aa5411d64b25a71516c2c7480aab13bb7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iio_sysfs_trig_init",
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-e94d1e57",
"digest": {
"length": 172.0,
"function_hash": "125145800489877428159401838794027210979"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@efa17e90e1711bdb084e3954fa44afb6647331c0",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iio_sysfs_trig_init",
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-f8e9c027",
"digest": {
"length": 172.0,
"function_hash": "125145800489877428159401838794027210979"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b47bb521961f027b4dcf8683337a7a1ba9e5ea1f",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iio_sysfs_trig_init",
"file": "drivers/iio/trigger/iio-trig-sysfs.c"
},
"id": "CVE-2022-49793-fc0bc527",
"digest": {
"length": 172.0,
"function_hash": "125145800489877428159401838794027210979"
},
"signature_type": "Function"
}
]