CVE-2022-49861
dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.9.334, 4.14.300
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() A clk_prepare_enable() call in the probe is not balanced by a corresponding clk_disable_unprepare() in the remove function. Add the missing call.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 4.9.104 · fixed in 4.9.334; From 4.14.45 · fixed in 4.14.300
- Linux Linux
4.16
References 8
git.kernel.org
- stable/c/04f2cc56d80a1ac058045a7835c5bfd910f17863
- stable/c/4b6641c3a2ba95ddcfecec263b4a5e572a4b0641
- stable/c/20479886b40c0ed4864a5fc8490a1f6b70cccf1b
- stable/c/1d84887327659c58a6637060ac8c50c3a952a163
- stable/c/0b7ee3d50f32d277bf024b4ddb4de54da43a3025
- stable/c/992e966caf57e00855edbd79f19d911809732a69
- stable/c/a1cb72e20a64a3c83f9b4ee993fbf97e4c1d7714
- stable/c/081195d17a0c4c636da2b869bd5809d42e8cbb13