In the Linux kernel, the following vulnerability has been resolved:
HID: hidraw: fix memory leak in hidraw_release()
Free the buffered reports before deleting the list entry.
BUG: memory leak unreferenced object 0xffff88810e72f180 (size 32): comm "softirq", pid 0, jiffies 4294945143 (age 16.080s) hex dump (first 32 bytes): 64 f3 c6 6a d1 88 07 04 00 00 00 00 00 00 00 00 d..j............ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff814ac6c3>] kmemdup+0x23/0x50 mm/util.c:128 [<ffffffff8357c1d2>] kmemdup include/linux/fortify-string.h:440 [inline] [<ffffffff8357c1d2>] hidrawreportevent+0xa2/0x150 drivers/hid/hidraw.c:521 [<ffffffff8356ddad>] hidreportrawevent+0x27d/0x740 drivers/hid/hid-core.c:1992 [<ffffffff8356e41e>] hidinputreport+0x1ae/0x270 drivers/hid/hid-core.c:2065 [<ffffffff835f0d3f>] hidirqin+0x1ff/0x250 drivers/hid/usbhid/hid-core.c:284 [<ffffffff82d3c7f9>] _usbhcdgivebackurb+0xf9/0x230 drivers/usb/core/hcd.c:1670 [<ffffffff82d3cc26>] usbhcdgivebackurb+0x1b6/0x1d0 drivers/usb/core/hcd.c:1747 [<ffffffff82ef1e14>] dummytimer+0x8e4/0x14c0 drivers/usb/gadget/udc/dummyhcd.c:1988 [<ffffffff812f50a8>] calltimerfn+0x38/0x200 kernel/time/timer.c:1474 [<ffffffff812f5586>] expiretimers kernel/time/timer.c:1519 [inline] [<ffffffff812f5586>] _runtimers.part.0+0x316/0x430 kernel/time/timer.c:1790 [<ffffffff812f56e4>] _runtimers kernel/time/timer.c:1768 [inline] [<ffffffff812f56e4>] runtimersoftirq+0x44/0x90 kernel/time/timer.c:1803 [<ffffffff848000e6>] _dosoftirq+0xe6/0x2ea kernel/softirq.c:571 [<ffffffff81246db0>] invokesoftirq kernel/softirq.c:445 [inline] [<ffffffff81246db0>] _irqexitrcu kernel/softirq.c:650 [inline] [<ffffffff81246db0>] irqexitrcu+0xc0/0x110 kernel/softirq.c:662 [<ffffffff84574f02>] sysvecapictimerinterrupt+0xa2/0xd0 arch/x86/kernel/apic/apic.c:1106 [<ffffffff84600c8b>] asmsysvecapictimerinterrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649 [<ffffffff8458a070>] nativesafehalt arch/x86/include/asm/irqflags.h:51 [inline] [<ffffffff8458a070>] archsafehalt arch/x86/include/asm/irqflags.h:89 [inline] [<ffffffff8458a070>] acpisafehalt drivers/acpi/processoridle.c:111 [inline] [<ffffffff8458a070>] acpiidledoentry+0xc0/0xd0 drivers/acpi/processor_idle.c:554
[
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"113802642170442119273010181362700301787",
"176720195243637444001063657273499910068",
"305331107193254199141437682348301253255",
"324796248956934319101015488280211473959",
"190519415628800138910535754549598899809",
"125041781139709337016273781270131087704"
]
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dfd27a737283313a3e626e97b9d9b2d8d6a94188",
"id": "CVE-2022-49981-07026800"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "179121021275766841851396249105419042655",
"length": 433.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "hidraw_release",
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5623a203cffe2d2b84d2f6c989d9017db1856af",
"id": "CVE-2022-49981-0ffe054d"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257372275997966849027936045900950003181",
"length": 431.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "hidraw_release",
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f5b7e9611cffec345d62d5bdd8b6e30e89956818",
"id": "CVE-2022-49981-14cab675"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"113802642170442119273010181362700301787",
"176720195243637444001063657273499910068",
"305331107193254199141437682348301253255",
"324796248956934319101015488280211473959",
"190519415628800138910535754549598899809",
"125041781139709337016273781270131087704"
]
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c06b013f5cbfeafe0a9cfa5a7128604c34e0e517",
"id": "CVE-2022-49981-1d818e06"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"305028163148293735404462416221053261741",
"162649405157507358817098632924962938265",
"251407964845998161367488477495283694837",
"125041781139709337016273781270131087704"
]
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5623a203cffe2d2b84d2f6c989d9017db1856af",
"id": "CVE-2022-49981-25354b3c"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"113802642170442119273010181362700301787",
"176720195243637444001063657273499910068",
"305331107193254199141437682348301253255",
"324796248956934319101015488280211473959",
"190519415628800138910535754549598899809",
"125041781139709337016273781270131087704"
]
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53c7c4d5d40b45c127cb1193bf3e9670f844c3cf",
"id": "CVE-2022-49981-4c2e79f4"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"305028163148293735404462416221053261741",
"162649405157507358817098632924962938265",
"251407964845998161367488477495283694837",
"125041781139709337016273781270131087704"
]
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@52a3c62a815161c2dcf38ac421f6c41d8679462b",
"id": "CVE-2022-49981-6d2ee97b"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"113802642170442119273010181362700301787",
"176720195243637444001063657273499910068",
"305331107193254199141437682348301253255",
"324796248956934319101015488280211473959",
"190519415628800138910535754549598899809",
"125041781139709337016273781270131087704"
]
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bea0bbf66001b0c7bf239a4d70eaf47824d3feb",
"id": "CVE-2022-49981-7bda3cad"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257372275997966849027936045900950003181",
"length": 431.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "hidraw_release",
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53c7c4d5d40b45c127cb1193bf3e9670f844c3cf",
"id": "CVE-2022-49981-c7ccfc6c"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257372275997966849027936045900950003181",
"length": 431.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "hidraw_release",
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bea0bbf66001b0c7bf239a4d70eaf47824d3feb",
"id": "CVE-2022-49981-ce048b82"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257372275997966849027936045900950003181",
"length": 431.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "hidraw_release",
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c06b013f5cbfeafe0a9cfa5a7128604c34e0e517",
"id": "CVE-2022-49981-cee2af5c"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "179121021275766841851396249105419042655",
"length": 433.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "hidraw_release",
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@52a3c62a815161c2dcf38ac421f6c41d8679462b",
"id": "CVE-2022-49981-d07f6db2"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"113802642170442119273010181362700301787",
"176720195243637444001063657273499910068",
"305331107193254199141437682348301253255",
"324796248956934319101015488280211473959",
"190519415628800138910535754549598899809",
"125041781139709337016273781270131087704"
]
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e2fa79226580b035b00260d9f240ab9bda4af5d",
"id": "CVE-2022-49981-d416d3cd"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257372275997966849027936045900950003181",
"length": 431.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "hidraw_release",
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e2fa79226580b035b00260d9f240ab9bda4af5d",
"id": "CVE-2022-49981-ec807907"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257372275997966849027936045900950003181",
"length": 431.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "hidraw_release",
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dfd27a737283313a3e626e97b9d9b2d8d6a94188",
"id": "CVE-2022-49981-fbfacf74"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"113802642170442119273010181362700301787",
"176720195243637444001063657273499910068",
"305331107193254199141437682348301253255",
"324796248956934319101015488280211473959",
"190519415628800138910535754549598899809",
"125041781139709337016273781270131087704"
]
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/hid/hidraw.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f5b7e9611cffec345d62d5bdd8b6e30e89956818",
"id": "CVE-2022-49981-fc0b2352"
}
]