CVE-2022-49190

kernel/resource: fix kfree() of bootmem memory again

published February 26, 2025

CVSS
—
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

kernel/resource: fix kfree() of bootmem memory again

Since commit ebff7d8f270d ("mem hotunplug: fix kfree() of bootmem

memory"), we could get a resource allocated during boot via

alloc_resource(). And it's required to release the resource using

free_resource(). Howerver, many people use kfree directly which will

result in kernel BUG. In order to fix this without fixing every call

site, just leak a couple of bytes in such corner case.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Published
2025-02-26T01:55Z
EPSS history
Timeline
  • 26 FEB 01:55Z
    kernel/resource: fix kfree() of bootmem memory again
    cvelistv5