Vulnerability Database

296,748

Total vulnerabilities in the database

CVE-2022-49746

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init

If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed.

We already met the sdma_load_context() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ...

In this case, the desc->bd will not be freed without this change.

  • Published: Mar 27, 2025
  • Updated: May 4, 2025
  • CVE: CVE-2022-49746
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 6.2-rc1 6.2-rc1.x
linux / linux_kernel 6.2-rc2 6.2-rc2.x
linux / linux_kernel 6.2-rc3 6.2-rc3.x
linux / linux_kernel 6.2-rc4 6.2-rc4.x
linux / linux_kernel 4.20 5.4.231
linux / linux_kernel 5.11 5.15.92
linux / linux_kernel - 4.19.272
linux / linux_kernel 5.5 5.10.167
linux / linux_kernel 5.16 6.1.10