CVE-2022-49902
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49902
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49902.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49902
- Downstream
- Related
- Published
- 2025-05-01T14:10:47Z
- Modified
- 2025-10-15T00:30:37.955020Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- block: Fix possible memory leak for rq_wb on add_disk failure
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
block: Fix possible memory leak for rqwb on adddisk failure
kmemleak reported memory leaks in deviceadddisk():
kmemleak: 3 new suspected memory leaks
unreferenced object 0xffff88800f420800 (size 512): comm "modprobe", pid 4275, jiffies 4295639067 (age 223.512s) hex dump (first 32 bytes): 04 00 00 00 08 00 00 00 01 00 00 00 00 00 00 00 ................ 00 e1 f5 05 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d3662699>] kmalloctrace+0x26/0x60 [<00000000edc7aadc>] wbtinit+0x50/0x6f0 [<0000000069601d16>] wbtenabledefault+0x157/0x1c0 [<0000000028fc393f>] blkregisterqueue+0x2a4/0x420 [<000000007345a042>] deviceadddisk+0x6fd/0xe40 [<0000000060e6aab0>] nbddevadd+0x828/0xbf0 [nbd] ...
It is because the memory allocated in wbtenabledefault() is not released in deviceadddisk() error path. Normally, these memory are freed in:
delgendisk() rqqosexit() rqos->ops->exit(rqos); wbtexit()
So rqqosexit() is called to free the rqwb memory for wbtinit(). However in the error path of deviceadddisk(), only blkunregisterqueue() is called and make rq_wb memory leaked.
Add rqqosexit() to the error path to fix it.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced83cbce9574462c6b4eed6797bdaf18fae6859ab3Fixed4e68c5da60cd79950bd56287ae80b39d6261f995
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced83cbce9574462c6b4eed6797bdaf18fae6859ab3Fixed528677d3b4af985445bd4ac667485ded1ed11220
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced83cbce9574462c6b4eed6797bdaf18fae6859ab3Fixedfa81cbafbf5764ad5053512152345fab37a1fe18
Affected versions
v5.*
v5.14
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.6
v5.15.60
v5.15.61
v5.15.62
v5.15.63
v5.15.64
v5.15.65
v5.15.66
v5.15.67
v5.15.68
v5.15.69
v5.15.7
v5.15.70
v5.15.71
v5.15.72
v5.15.73
v5.15.74
v5.15.75
v5.15.76
v5.15.77
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v6.*
v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e68c5da60cd79950bd56287ae80b39d6261f995",
"signature_version": "v1",
"target": {
"file": "block/genhd.c"
},
"digest": {
"line_hashes": [
"6362877676086571176667484368337669656",
"207614276307501847100311526209238148544",
"125406043246483210119316378575012691319",
"147615999867186015715316015364178447672"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2022-49902-106f81f1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e68c5da60cd79950bd56287ae80b39d6261f995",
"signature_version": "v1",
"target": {
"file": "block/genhd.c",
"function": "device_add_disk"
},
"digest": {
"length": 2843.0,
"function_hash": "278103657014190712276288901728056704938"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2022-49902-577d8d07"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa81cbafbf5764ad5053512152345fab37a1fe18",
"signature_version": "v1",
"target": {
"file": "block/genhd.c",
"function": "device_add_disk"
},
"digest": {
"length": 3081.0,
"function_hash": "233349983686293884128070411923162697071"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2022-49902-6661f57d"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@528677d3b4af985445bd4ac667485ded1ed11220",
"signature_version": "v1",
"target": {
"file": "block/genhd.c",
"function": "device_add_disk"
},
"digest": {
"length": 2858.0,
"function_hash": "146025340123954478450158698870295138120"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2022-49902-7a10cb05"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa81cbafbf5764ad5053512152345fab37a1fe18",
"signature_version": "v1",
"target": {
"file": "block/genhd.c"
},
"digest": {
"line_hashes": [
"6362877676086571176667484368337669656",
"207614276307501847100311526209238148544",
"125406043246483210119316378575012691319",
"147615999867186015715316015364178447672"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2022-49902-c1ca1963"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@528677d3b4af985445bd4ac667485ded1ed11220",
"signature_version": "v1",
"target": {
"file": "block/genhd.c"
},
"digest": {
"line_hashes": [
"6362877676086571176667484368337669656",
"207614276307501847100311526209238148544",
"125406043246483210119316378575012691319",
"147615999867186015715316015364178447672"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2022-49902-e5418396"
}
]