github - ghsa-vggc-4cwp-hvvp

ghsa-vggc-4cwp-hvvp

Vulnerability from github

Published

2025-03-12 00:31

Modified

2025-03-12 00:31

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cm: Fix memory leak in ib_cm_insert_listen

cm_alloc_id_priv() allocates resource for the cm_id_priv. When cm_init_listen() fails it doesn't free it, leading to memory leak.

Add the missing error unwind.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-49671"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-401"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-26T07:01:42Z",
    "severity": "MODERATE"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/cm: Fix memory leak in ib_cm_insert_listen\n\ncm_alloc_id_priv() allocates resource for the cm_id_priv. When\ncm_init_listen() fails it doesn\u0027t free it, leading to memory leak.\n\nAdd the missing error unwind.",
  "id": "GHSA-vggc-4cwp-hvvp",
  "modified": "2025-03-12T00:31:48Z",
  "published": "2025-03-12T00:31:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49671"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2990f223ffa7bb25422956b9f79f9176a5b38346"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2febf09a8a8ae4accf908f043f1bab1421056568"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/889000874c1204e47c7f2a4945db262a47e7efc9"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b0cab8b517aeaf2592c3479294f934209c41a26f"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2022-49671 (GCVE-0-2022-49671)

Vulnerability from cvelistv5

Published

2025-02-26 02:24

Modified

2025-05-04 08:42

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix memory leak in ib_cm_insert_listen cm_alloc_id_priv() allocates resource for the cm_id_priv. When cm_init_listen() fails it doesn't free it, leading to memory leak. Add the missing error unwind.

References

►

URL

Tags

	https://git.kernel.org/stable/c/b0cab8b517aeaf2592c3479294f934209c41a26f
	https://git.kernel.org/stable/c/889000874c1204e47c7f2a4945db262a47e7efc9
	https://git.kernel.org/stable/c/2febf09a8a8ae4accf908f043f1bab1421056568
	https://git.kernel.org/stable/c/2990f223ffa7bb25422956b9f79f9176a5b38346

Impacted products

Vendor

Product

Version

►

Version: 98f67156a80f37db70ec64787020b1f9bc8aea8c
Version: 98f67156a80f37db70ec64787020b1f9bc8aea8c
Version: 98f67156a80f37db70ec64787020b1f9bc8aea8c
Version: 98f67156a80f37db70ec64787020b1f9bc8aea8c

Version: 5.7

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/core/cm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b0cab8b517aeaf2592c3479294f934209c41a26f",
              "status": "affected",
              "version": "98f67156a80f37db70ec64787020b1f9bc8aea8c",
              "versionType": "git"
            },
            {
              "lessThan": "889000874c1204e47c7f2a4945db262a47e7efc9",
              "status": "affected",
              "version": "98f67156a80f37db70ec64787020b1f9bc8aea8c",
              "versionType": "git"
            },
            {
              "lessThan": "2febf09a8a8ae4accf908f043f1bab1421056568",
              "status": "affected",
              "version": "98f67156a80f37db70ec64787020b1f9bc8aea8c",
              "versionType": "git"
            },
            {
              "lessThan": "2990f223ffa7bb25422956b9f79f9176a5b38346",
              "status": "affected",
              "version": "98f67156a80f37db70ec64787020b1f9bc8aea8c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/core/cm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.7"
            },
            {
              "lessThan": "5.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.129",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.129",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.53",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.10",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/cm: Fix memory leak in ib_cm_insert_listen\n\ncm_alloc_id_priv() allocates resource for the cm_id_priv. When\ncm_init_listen() fails it doesn\u0027t free it, leading to memory leak.\n\nAdd the missing error unwind."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T08:42:59.885Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b0cab8b517aeaf2592c3479294f934209c41a26f"
        },
        {
          "url": "https://git.kernel.org/stable/c/889000874c1204e47c7f2a4945db262a47e7efc9"
        },
        {
          "url": "https://git.kernel.org/stable/c/2febf09a8a8ae4accf908f043f1bab1421056568"
        },
        {
          "url": "https://git.kernel.org/stable/c/2990f223ffa7bb25422956b9f79f9176a5b38346"
        }
      ],
      "title": "RDMA/cm: Fix memory leak in ib_cm_insert_listen",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49671",
    "datePublished": "2025-02-26T02:24:04.608Z",
    "dateReserved": "2025-02-26T02:21:30.437Z",
    "dateUpdated": "2025-05-04T08:42:59.885Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.