Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-49627

ima: Fix potential memory leak in ima_init_crypto()

Description

In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in ima_init_crypto() On failure to allocate the SHA1 tfm, IMA fails to initialize and exits without freeing the ima_algo_array. Add the missing kfree() for ima_algo_array to avoid the potential memory leak.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6d94809af6b0830c4dfcad661535a5939bcb8a7d to < c1d9702ceb4a091da6bee380627596d1fba09274affected
  • 6d94809af6b0830c4dfcad661535a5939bcb8a7d to < 601ae26aa2802a4c10c94d7388a99eabdbefab2baffected
  • 6d94809af6b0830c4dfcad661535a5939bcb8a7d to < 830de9667b3ada0a75a3f098dfc7159709fe397baffected
  • 6d94809af6b0830c4dfcad661535a5939bcb8a7d to < 067d2521874135267e681c19d42761c601d503d6affected

Linux Linux

Default version status: affected

  • 5.8affected
  • 0 to < 5.8unaffected
  • 5.10.132 to ≤ 5.10.*unaffected
  • 5.15.56 to ≤ 5.15.*unaffected
  • 5.18.13 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References