CVE-2022-49648

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

tracing/histograms: Fix memory leak problem

This reverts commit 46bbe5c671e06f070428b9be142cc4ee5cedebac.

As commit 46bbe5c671e0 ("tracing: fix double free") said, the

"double free" problem reported by clang static analyzer is:

> In parse_var_defs() if there is a problem allocating

> var_defs.expr, the earlier var_defs.name is freed.

> This free is duplicated by free_var_defs() which frees

> the rest of the list.

However, if there is a problem allocating N-th var_defs.expr:

+ in parse_var_defs(), the freed 'earlier var_defs.name' is

actually the N-th var_defs.name;

+ then in free_var_defs(), the names from 0th to (N-1)-th are freed;

IF ALLOCATING PROBLEM HAPPENED HERE!!! -+

\

|

0th 1th (N-1)-th N-th V

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References