CVE-2022-50529

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

test_firmware: fix memory leak in test_firmware_init()

When misc_register() failed in test_firmware_init(), the memory pointed

by test_fw_config->name is not released. The memory leak information is

as follows:

unreferenced object 0xffff88810a34cb00 (size 32):

comm "insmod", pid 7952, jiffies 4294948236 (age 49.060s)

hex dump (first 32 bytes):

74 65 73 74 2d 66 69 72 6d 77 61 72 65 2e 62 69 test-firmware.bi

6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 n...............

backtrace:

[<ffffffff81b21fcb>] __kmalloc_node_track_caller+0x4b/0xc0

[<ffffffff81affb96>] kstrndup+0x46/0xc0

[<ffffffffa0403a49>] __test_firmware_config_init+0x29/0x380 [test_firmware]

[<ffffffffa040f068>] 0xffffffffa040f068

[<ffffffff81002c41>] do_one_initcall+0x141/0x780

[<ffffffff816a72c3>] do_init_module+0x1c3/0x630

[<ffffffff816adb9e>] load_module+0x623e/0x76a0

[<ffffffff816af471>] __do_sys_finit_

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References