CVE-2022-49549

x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails

In mce_threshold_create_device(), if threshold_create_bank() fails, the

previously allocated threshold banks array @bp will be leaked because

the call to mce_threshold_remove_device() will not free it.

This happens because mce_threshold_remove_device() fetches the pointer

through the threshold_banks per-CPU variable but bp is written there

only after the bank creation is successful, and not before, when

threshold_create_bank() fails.

Add a helper which unwinds all the bank creation work previously done

and pass into it the previously allocated threshold banks array for

freeing.

[ bp: Massage. ]

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00268 · 18.0th percentile
Published
2025-02-26T02:14Z
EPSS history
Timeline
  • 26 FEB 02:14Z
    x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails
    cvelistv5