#VU104349 Memory leak in Linux kernel - CVE-2022-49715

Vulnerability identifier: #VU104349

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49715

CWE-ID: CWE-401

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the gic_populate_ppi_partitions() function in drivers/irqchip/irq-gic-v3.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/506a88a5bf261d76a5214c0338a320f2214c67ac
https://git.kernel.org/stable/c/8d884c08eeb83142a7173cb46bcff0434ec42cf1
https://git.kernel.org/stable/c/c136c2924a59a399aa789858cfb320d481964fb7
https://git.kernel.org/stable/c/cc5984cf270b69d03f9f4b27063e535036c659e9
https://git.kernel.org/stable/c/e824482e2c5edacc961b7dd30a92fd47606c3036
https://git.kernel.org/stable/c/fa1ad9d4cc47ca2470cd904ad4519f05d7e43a2b

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.