CVE-2022-50545

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

r6040: Fix kmemleak in probe and remove

There is a memory leaks reported by kmemleak:

unreferenced object 0xffff888116111000 (size 2048):

comm "modprobe", pid 817, jiffies 4294759745 (age 76.502s)

hex dump (first 32 bytes):

00 c4 0a 04 81 88 ff ff 08 10 11 16 81 88 ff ff ................

08 10 11 16 81 88 ff ff 00 00 00 00 00 00 00 00 ................

backtrace:

[<ffffffff815bcd82>] kmalloc_trace+0x22/0x60

[<ffffffff827e20ee>] phy_device_create+0x4e/0x90

[<ffffffff827e6072>] get_phy_device+0xd2/0x220

[<ffffffff827e7844>] mdiobus_scan+0xa4/0x2e0

[<ffffffff827e8be2>] __mdiobus_register+0x482/0x8b0

[<ffffffffa01f5d24>] r6040_init_one+0x714/0xd2c [r6040]

...

The problem occurs in probe process as follows:

r6040_init_one:

mdiobus_register

mdiobus_scan <- alloc and register phy_device,

the reference count of phy_

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References