In the Linux kernel, the following vulnerability has been resolved:
fbdev: fbcon: release buffer when fbcondoset_font() failed
syzbot is reporting memory leak at fbcondosetfont() [1], for commit a5a923038d70 ("fbdev: fbcon: Properly revert changes when vcresize() failed") missed that the buffer might be newly allocated by fbconsetfont().
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06926607b9fddf7ce8017493899ce6eb7e79a123",
"target": {
"function": "fbcon_do_set_font",
"file": "drivers/video/fbdev/core/fbcon.c"
},
"digest": {
"function_hash": "138834547788407572886582944219547111130",
"length": 1719.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-50404-0a5e2e84",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88ec6d11052da527eb9268831e7a9bc5bbad02f6",
"target": {
"file": "drivers/video/fbdev/core/fbcon.c"
},
"digest": {
"line_hashes": [
"108050887175974271456794181276428064262",
"10144032379765119275232586129640281279",
"99376478688824378381391973219095230446",
"48095128951824204569478556196491532410"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-50404-0a6f4c14",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88ec6d11052da527eb9268831e7a9bc5bbad02f6",
"target": {
"function": "fbcon_do_set_font",
"file": "drivers/video/fbdev/core/fbcon.c"
},
"digest": {
"function_hash": "289253618873982980543257864529343208509",
"length": 1739.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-50404-20397ae5",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c3bfb8586f848317ceba5d777e11204ba3e5758",
"target": {
"function": "fbcon_do_set_font",
"file": "drivers/video/fbdev/core/fbcon.c"
},
"digest": {
"function_hash": "138834547788407572886582944219547111130",
"length": 1719.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-50404-2de25f6a",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a609bfc1e644a8467cb31945ed1488374ebdc013",
"target": {
"function": "fbcon_do_set_font",
"file": "drivers/video/fbdev/core/fbcon.c"
},
"digest": {
"function_hash": "138834547788407572886582944219547111130",
"length": 1719.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-50404-404addb9",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a609bfc1e644a8467cb31945ed1488374ebdc013",
"target": {
"file": "drivers/video/fbdev/core/fbcon.c"
},
"digest": {
"line_hashes": [
"108050887175974271456794181276428064262",
"10144032379765119275232586129640281279",
"99376478688824378381391973219095230446",
"48095128951824204569478556196491532410"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-50404-46e00b64",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06926607b9fddf7ce8017493899ce6eb7e79a123",
"target": {
"file": "drivers/video/fbdev/core/fbcon.c"
},
"digest": {
"line_hashes": [
"108050887175974271456794181276428064262",
"10144032379765119275232586129640281279",
"99376478688824378381391973219095230446",
"48095128951824204569478556196491532410"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-50404-49dd93cf",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c3bfb8586f848317ceba5d777e11204ba3e5758",
"target": {
"file": "drivers/video/fbdev/core/fbcon.c"
},
"digest": {
"line_hashes": [
"108050887175974271456794181276428064262",
"10144032379765119275232586129640281279",
"99376478688824378381391973219095230446",
"48095128951824204569478556196491532410"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-50404-f3d64754",
"signature_type": "Line"
}
]