cpufreq: qcom: fix memory leak in error path (Linux Linux)

CVE-2022-50658
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.24 % · centile 16 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Deferred

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never free the speedbin buffer. This commit fixes the error path to always free the speedbin buffer.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected a8811ec764f95a04ba82f6f457e28c5e9e36e36b < e55feb31df3fc78b880d6e9d4b5853f05c974833 ; affected a8811ec764f95a04ba82f6f457e28c5e9e36e36b < b5606e3ab1f7cc00d89903f4a11fe57747bb3a68 ; affected a8811ec764f95a04ba82f6f457e28c5e9e36e36b < b6ea267e0c6bdf5463358e2a2e5280cfa6cacc48 ; affected a8811ec764f95a04ba82f6f457e28c5e9e36e36b < 9f42cf54403a42cb092636804d2628d8ecf71e75
Linux · Linuxaffected 5.7 ; unaffected 0 < 5.7 ; unaffected 5.10.152 ≤ 5.10.* ; unaffected 5.15.76 ≤ 5.15.* ; unaffected 6.0.6 ≤ 6.0.* ; unaffected 6.1 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD