CVE-2022-48846

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48846

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: block: release rq qos structures for queue without disk blkcg_init_queue() may add rq qos structures to request queue, previously blk_cleanup_queue() calls rq_qos_exit() to release them, but commit 8e141f9eb803 ("block: drain file system I/O on del_gendisk") moves rq_qos_exit() into del_gendisk(), so memory leak is caused because queues may not have disk, such as un-present scsi luns, nvme admin queue, ... Fixes the issue by adding rq_qos_exit() to blk_cleanup_queue() back. BTW, v5.18 won't need this patch any more since we move blkcg_init_queue()/blkcg_exit_queue() into disk allocation/release handler, and patches have been in for-5.18/block.

References
Link Resource
https://git.kernel.org/stable/c/60c2c8e2ef3a3ec79de8cbc80a06ca0c21df8c29 Patch
https://git.kernel.org/stable/c/d4ad8736ac982111bb0be8306bf19c8207f6600e Patch
https://git.kernel.org/stable/c/daaca3522a8e67c46e39ef09c1d542e866f85f3b Patch
https://git.kernel.org/stable/c/60c2c8e2ef3a3ec79de8cbc80a06ca0c21df8c29 Patch
https://git.kernel.org/stable/c/d4ad8736ac982111bb0be8306bf19c8207f6600e Patch
https://git.kernel.org/stable/c/daaca3522a8e67c46e39ef09c1d542e866f85f3b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:34

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/60c2c8e2ef3a3ec79de8cbc80a06ca0c21df8c29 - Patch () https://git.kernel.org/stable/c/60c2c8e2ef3a3ec79de8cbc80a06ca0c21df8c29 - Patch
References () https://git.kernel.org/stable/c/d4ad8736ac982111bb0be8306bf19c8207f6600e - Patch () https://git.kernel.org/stable/c/d4ad8736ac982111bb0be8306bf19c8207f6600e - Patch
References () https://git.kernel.org/stable/c/daaca3522a8e67c46e39ef09c1d542e866f85f3b - Patch () https://git.kernel.org/stable/c/daaca3522a8e67c46e39ef09c1d542e866f85f3b - Patch

24 Jul 2024, 17:56

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/60c2c8e2ef3a3ec79de8cbc80a06ca0c21df8c29 - () https://git.kernel.org/stable/c/60c2c8e2ef3a3ec79de8cbc80a06ca0c21df8c29 - Patch
References () https://git.kernel.org/stable/c/d4ad8736ac982111bb0be8306bf19c8207f6600e - () https://git.kernel.org/stable/c/d4ad8736ac982111bb0be8306bf19c8207f6600e - Patch
References () https://git.kernel.org/stable/c/daaca3522a8e67c46e39ef09c1d542e866f85f3b - () https://git.kernel.org/stable/c/daaca3522a8e67c46e39ef09c1d542e866f85f3b - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bloque: liberar estructuras rq qos para cola sin disco blkcg_init_queue() puede agregar estructuras rq qos para solicitar cola, previamente blk_cleanup_queue() llama a rq_qos_exit() para liberarlas, pero commit 8e141f9eb803 ( "bloque: drenar la E/S del sistema de archivos en del_gendisk") mueve rq_qos_exit() a del_gendisk(), por lo que la pérdida de memoria se debe a que es posible que las colas no tengan disco, como los luns scsi no presentes, la cola de administración de nvme, ... solucione el problema agregando rq_qos_exit() a blk_cleanup_queue() nuevamente. Por cierto, v5.18 ya no necesitará este parche ya que movemos blkcg_init_queue()/blkcg_exit_queue() al controlador de asignación/liberación de disco, y los parches han estado en for-5.18/block.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401

16 Jul 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-16 13:15

Updated : 2024-11-21 07:34

NVD link : CVE-2022-48846

Mitre link : CVE-2022-48846

CVE.ORG link : CVE-2022-48846

JSON object : View

Products Affected

linux

CWE
CWE-401

Missing Release of Memory after Effective Lifetime