Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48924

thermal: int340x: fix memory leak in int3400_notify()

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below memory leaks in my TigerLake platform: unreferenced object 0xffff927c8b91dbc0 (size 32): comm "kworker/0:2", pid 112, jiffies 4294893323 (age 83.604s) hex dump (first 32 bytes): 4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The 72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk. backtrace: [<ffffffff9c502c3e>] __kmalloc_track_caller+0x2fe/0x4a0 [<ffffffff9c7b7c15>] kvasprintf+0x65/0xd0 [<ffffffff9c7b7d6e>] kasprintf+0x4e/0x70 [<ffffffffc04cb662>] int3400_notify+0x82/0x120 [int3400_thermal] [<ffffffff9c8b7358>] acpi_ev_notify_dispatch+0x54/0x71 [<ffffffff9c88f1a7>] acpi_os_execute_deferred+0x17/0x30 [<ffffffff9c2c2c0a>] process_one_work+0x21a/0x3f0 [<ffffffff9c2c2e2a>] worker_thread+0x4a/0x3b0 [<ffffffff9c2cb4dd>] kthread+0xfd/0x130 [<ffffffff9c201c1f>] ret_from_fork+0x1f/0x30 Fix it by calling kfree() accordingly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 38e44da591303d08b0d965a033e11ade284999d0 to < f0ddc5184b0127038d05008e2a69f89d1e13f980affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to < c3fa6d1937a8d0828131a04ae2cd2c30d0668693affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to < 2e798814e01827871938ff172d2b2ccf1e74b355affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to < e098933866f9e1dd3ef4eebbe2e3d504f970f599affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to < ba9efbbf6745750d34c1e87c9539ce9db645ca0aaffected
  • 38e44da591303d08b0d965a033e11ade284999d0 to < 33c73a4d7e7b19313a6b417152f5365016926418affected
  • 38e44da591303d08b0d965a033e11ade284999d0 to < 3abea10e6a8f0e7804ed4c124bea2d15aca977c8affected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 4.14.274 to ≤ 4.14.*unaffected
  • 4.19.237 to ≤ 4.19.*unaffected
  • 5.4.188 to ≤ 5.4.*unaffected
  • 5.10.103 to ≤ 5.10.*unaffected
  • 5.15.26 to ≤ 5.15.*unaffected
  • 5.16.12 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References