Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-50391

mm/mempolicy: fix memory leak in set_mempolicy_home_node system call

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix memory leak in set_mempolicy_home_node system call When encountering any vma in the range with policy other than MPOL_BIND or MPOL_PREFERRED_MANY, an error is returned without issuing a mpol_put on the policy just allocated with mpol_dup(). This allows arbitrary users to leak kernel memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c6018b4b254971863bd0ad36bb5e7d0fa0f0ddb0 to < 4ca0eb6b2f3add8c5daefb726ce57dc95d103d33affected
  • c6018b4b254971863bd0ad36bb5e7d0fa0f0ddb0 to < 0ce4cc6d269ddc448a825955b495f662f5d9e153affected
  • c6018b4b254971863bd0ad36bb5e7d0fa0f0ddb0 to < 38ce7c9bdfc228c14d7621ba36d3eebedd9d4f76affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 6.0.17 to ≤ 6.0.*unaffected
  • 6.1.3 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References