CVE-2022-49891

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()

test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak

when there is no failure. Move kfree(buf) from fail path to common path

to prevent the memleak. The same reason and solution in

test_gen_kretprobe_cmd().

unreferenced object 0xffff888143b14000 (size 2048):

comm "insmod", pid 52490, jiffies 4301890980 (age 40.553s)

hex dump (first 32 bytes):

70 3a 6b 70 72 6f 62 65 73 2f 67 65 6e 5f 6b 70 p:kprobes/gen_kp

72 6f 62 65 5f 74 65 73 74 20 64 6f 5f 73 79 73 robe_test do_sys

backtrace:

[<000000006d7b836b>] kmalloc_trace+0x27/0xa0

[<0000000009528b5b>] 0xffffffffa059006f

[<000000008408b580>] do_one_initcall+0x87/0x2a0

[<00000000c4980a7e>] do_init_module+0xdf/0x320

[<00000000d775aad0>] load_module+0x3006/0x3390

[<00000000e9a74b80>] __do_sys_finit_module+0x113/0x1b0

[<000000003726480d>] do_syscall_

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References