CVE-2022-49334

mm/huge_memory: Fix xarray node memory leak

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm/huge_memory: Fix xarray node memory leak

If xas_split_alloc() fails to allocate the necessary nodes to complete the

xarray entry split, it sets the xa_state to -ENOMEM, which xas_nomem()

then interprets as "Please allocate more memory", not as "Please free

any unnecessary memory" (which was the intended outcome). It's confusing

to use xas_nomem() to free memory in this context, so call xas_destroy()

instead.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Published
2025-02-26T02:10Z
EPSS history
Timeline
  • 26 FEB 02:10Z
    mm/huge_memory: Fix xarray node memory leak
    cvelistv5