Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() In btrfs_get_dev_args_from_path(), btrfs_get_bdev_and_sb() can fail if the path is invalid. In this case, btrfs_get_dev_args_from_path() returns directly without freeing args->uuid and args->fsid allocated before, which causes memory leak. To fix these possible leaks, when btrfs_get_bdev_and_sb() fails, btrfs_put_dev_args_from_path() is called to clean up the memory.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.15.54, < 5.15.64 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/4b124ad87244cd7f0883c5eaa38d2326b2154cadPatch
- https://git.kernel.org/stable/c/5f52402c77013e4a826394b807dd5ea4dc83bd72Patch
- https://git.kernel.org/stable/c/9ea0106a7a3d8116860712e3f17cd52ce99f6707Patch
FAQ
What is CVE-2022-49996?
CVE-2022-49996 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() In btrfs_get_dev_args_from_path(), btrfs_get_bdev_and_sb() can f...
How severe is CVE-2022-49996?
CVE-2022-49996 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-49996?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.