CVE-2022-49210

MIPS: pgalloc: fix memory leak caused by pgd_free()

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

MIPS: pgalloc: fix memory leak caused by pgd_free()

pgd page is freed by generic implementation pgd_free() since commit

f9cb654cb550 ("asm-generic: pgalloc: provide generic pgd_free()"),

however, there are scenarios that the system uses more than one page as

the pgd table, in such cases the generic implementation pgd_free() won't

be applicable anymore. For example, when PAGE_SIZE_4KB is enabled and

MIPS_VA_BITS_48 is not enabled in a 64bit system, the macro "PGD_ORDER"

will be set as "1", which will cause allocating two pages as the pgd

table. Well, at the same time, the generic implementation pgd_free()

just free one pgd page, which will result in the memory leak.

The memory leak can be easily detected by executing shell command:

"while true; do ls > /dev/null; grep MemFree /proc/meminfo; done"

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Published
2025-02-26T01:55Z
EPSS history
Timeline
  • 26 FEB 01:55Z
    MIPS: pgalloc: fix memory leak caused by pgd_free()
    cvelistv5