CVE-2022-49891

tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()

Medium · published May 1, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()

test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak

when there is no failure. Move kfree(buf) from fail path to common path

to prevent the memleak. The same reason and solution in

test_gen_kretprobe_cmd().

unreferenced object 0xffff888143b14000 (size 2048):

comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s)

hex dump (first 32 bytes):

70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp

72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys

backtrace:

[<000000006d7b836b>] kmalloc_trace+0x27/0xa0

[<0000000009528b5b>] 0xffffffffa059006f

[<000000008408b580>] do_one_initcall+0x87/0x2a0

[<00000000c4980a7e>] do_init_module+0xdf/0x320

[<00000000d775aad0>] load_module+0x3006/0x3390

[<00000000e9a74b80>] __do_sys_finit_module+0x113/0x1b0

[<000000003726480d>] do_syscall_64+0x35/0x80

[<000000003441e93b>] entry_SYSCALL_64_after_hwframe+0x46/0xb0

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Published
2025-05-01T14:10Z
EPSS history
Timeline
  • 01 MAY 14:10Z
    tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
    cvelistv5