| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025050147-CVE-2022-49861-d502@gregkh> Date: Thu, 1 May 2025 16:10:51 +0200 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...nel.org> Subject: CVE-2022-49861: dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() From: Greg Kroah-Hartman <gregkh@...nel.org> Description =========== In the Linux kernel, the following vulnerability has been resolved: dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() A clk_prepare_enable() call in the probe is not balanced by a corresponding clk_disable_unprepare() in the remove function. Add the missing call. The Linux kernel CVE team has assigned CVE-2022-49861 to this issue. Affected and fixed versions =========================== Issue introduced in 4.9.104 with commit 3bdcced41936b054470639c6a76ae033df1074e3 and fixed in 4.9.334 with commit 04f2cc56d80a1ac058045a7835c5bfd910f17863 Issue introduced in 4.14.45 with commit 2299285fb1819ef8459c116fd1eafe1458bb9ca1 and fixed in 4.14.300 with commit 4b6641c3a2ba95ddcfecec263b4a5e572a4b0641 Issue introduced in 4.16 with commit 3cd2c313f1d618f92d1294addc6c685c17065761 and fixed in 4.19.267 with commit 20479886b40c0ed4864a5fc8490a1f6b70cccf1b Issue introduced in 4.16 with commit 3cd2c313f1d618f92d1294addc6c685c17065761 and fixed in 5.4.225 with commit 1d84887327659c58a6637060ac8c50c3a952a163 Issue introduced in 4.16 with commit 3cd2c313f1d618f92d1294addc6c685c17065761 and fixed in 5.10.155 with commit 0b7ee3d50f32d277bf024b4ddb4de54da43a3025 Issue introduced in 4.16 with commit 3cd2c313f1d618f92d1294addc6c685c17065761 and fixed in 5.15.79 with commit 992e966caf57e00855edbd79f19d911809732a69 Issue introduced in 4.16 with commit 3cd2c313f1d618f92d1294addc6c685c17065761 and fixed in 6.0.9 with commit a1cb72e20a64a3c83f9b4ee993fbf97e4c1d7714 Issue introduced in 4.16 with commit 3cd2c313f1d618f92d1294addc6c685c17065761 and fixed in 6.1 with commit 081195d17a0c4c636da2b869bd5809d42e8cbb13 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49861 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/dma/mv_xor_v2.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/04f2cc56d80a1ac058045a7835c5bfd910f17863 https://git.kernel.org/stable/c/4b6641c3a2ba95ddcfecec263b4a5e572a4b0641 https://git.kernel.org/stable/c/20479886b40c0ed4864a5fc8490a1f6b70cccf1b https://git.kernel.org/stable/c/1d84887327659c58a6637060ac8c50c3a952a163 https://git.kernel.org/stable/c/0b7ee3d50f32d277bf024b4ddb4de54da43a3025 https://git.kernel.org/stable/c/992e966caf57e00855edbd79f19d911809732a69 https://git.kernel.org/stable/c/a1cb72e20a64a3c83f9b4ee993fbf97e4c1d7714 https://git.kernel.org/stable/c/081195d17a0c4c636da2b869bd5809d42e8cbb13
Powered by blists - more mailing lists