CVE-2022-50134
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a memory chunk for uctxt->groups with hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups is not released, which will lead to a memory leak. We should release the uctxt->groups with hfi1_free_ctxt_rcv_groups() when init_user_ctxt() fails.
How to fix
- linux linux_kernel4.14.291, 4.19.256, 5.4.211, 5.10.137, 5.15.61, 5.18.18, 5.19.2 or later
- git.kernel.org/stable/c/1750be1e9f18787cf717c24dbc5fa029fc372a22
- git.kernel.org/stable/c/2f90813f1c21c3d780585390af961bd17c8515ae
- git.kernel.org/stable/c/90ef48a718f88935d4af53d7dadd1ceafe103ce6
- git.kernel.org/stable/c/a85c7dd1edadcdeca24e603a6618153a3bcc81ca
- git.kernel.org/stable/c/a9055dfe437efae77e28e57205437c878a03ccb7
- git.kernel.org/stable/c/aa2a1df3a2c85f855af7d54466ac10bd48645d63
- git.kernel.org/stable/c/e25b828553aecb3185a8d8d0c4f9b4e133fb5db6
- git.kernel.org/stable/c/fc4de8009fd6c2ca51986c6757efa964040e7d02
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.14 ≤ v < 4.14.291, 4.15 ≤ v < 4.19.256, 4.20 ≤ v < 5.4.211, 5.5 ≤ v < 5.10.137, 5.11 ≤ v < 5.15.61, 5.16 ≤ v < 5.18.18, 5.19 ≤ v < 5.19.2 | 4.14.291, 4.19.256, 5.4.211, 5.10.137, 5.15.61, 5.18.18, 5.19.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.