CVE-2022-49901

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: Fix kmemleak in blk_mq_init_allocated_queue

There is a kmemleak caused by modprobe null_blk.ko

unreferenced object 0xffff8881acb1f000 (size 1024):

comm "modprobe", pid 836, jiffies 4294971190 (age 27.068s)

hex dump (first 32 bytes):

00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N..........

ff ff ff ff ff ff ff ff 00 53 99 9e ff ff ff ff .........S......

backtrace:

[<000000004a10c249>] kmalloc_node_trace+0x22/0x60

[<00000000648f7950>] blk_mq_alloc_and_init_hctx+0x289/0x350

[<00000000af06de0e>] blk_mq_realloc_hw_ctxs+0x2fe/0x3d0

[<00000000e00c1872>] blk_mq_init_allocated_queue+0x48c/0x1440

[<00000000d16b4e68>] __blk_mq_alloc_disk+0xc8/0x1c0

[<00000000d10c98c3>] 0xffffffffc450d69d

[<00000000b9299f48>] 0xffffffffc4538392

[<0000000061c39ed6>] do_one_initcall+0xd0/0x4f0

[<00000000b389383b>] do_init_module+0x1a4/0x680

[<0000000087cf3542>] load_module+0x

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References