NetSight
medium5.5

CVE-2022-50134

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a mem…

Impact

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a memory chunk for uctxt->groups with hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups is not released, which will lead to a memory leak. We should release the uctxt->groups with hfi1_free_ctxt_rcv_groups() when init_user_ctxt() fails.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.14 before 4.14.291
from 4.15 before 4.19.256
from 4.20 before 5.4.211
from 5.5 before 5.10.137
from 5.11 before 5.15.61
from 5.16 before 5.18.18

Weakness classification

References