Memory leak in Linux kernel irqchip driver

1) Memory leak

EUVDB-ID: #VU104349

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49715

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the gic_populate_ppi_partitions() function in drivers/irqchip/irq-gic-v3.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/506a88a5bf261d76a5214c0338a320f2214c67ac
https://git.kernel.org/stable/c/8d884c08eeb83142a7173cb46bcff0434ec42cf1
https://git.kernel.org/stable/c/c136c2924a59a399aa789858cfb320d481964fb7
https://git.kernel.org/stable/c/cc5984cf270b69d03f9f4b27063e535036c659e9
https://git.kernel.org/stable/c/e824482e2c5edacc961b7dd30a92fd47606c3036
https://git.kernel.org/stable/c/fa1ad9d4cc47ca2470cd904ad4519f05d7e43a2b

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.