#VU104392 Memory leak in Linux kernel - CVE-2022-49206

Vulnerability identifier: #VU104392

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49206

CWE-ID: CWE-401

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the subscribe_event_xa_alloc() function in drivers/infiniband/hw/mlx5/devx.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/0174a89663a5ef83617da15bf24c0af2f62b6c7f
https://git.kernel.org/stable/c/087f9c3f2309ed183f7e4b85ae57121d8663224d
https://git.kernel.org/stable/c/414b4e8738484379f18d6c4e780787c80dbf8a2c
https://git.kernel.org/stable/c/8dd392e352d3269938fea32061a74655a613f929
https://git.kernel.org/stable/c/c98d903ff9e79c210beddea4e6bc15ac38e25aa5
https://git.kernel.org/stable/c/d66498507801fd9a20307a15a0814a0a016c3cde

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.