NetSight
IP …
medium5.5

CVE-2022-50140

In the Linux kernel, the following vulnerability has been resolved: memstick/ms_block: Fix a memory leak 'erased_blocks_bitmap' is never freed.

Impact

In the Linux kernel, the following vulnerability has been resolved: memstick/ms_block: Fix a memory leak 'erased_blocks_bitmap' is never freed. As it is allocated at the same time as 'used_blocks_bitmap', it is likely that it should be freed also at the same time. Add the corresponding bitmap_free() in msb_data_clear().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.12 before 4.14.291
from 4.15 before 4.19.256
from 4.20 before 5.4.211
from 5.5 before 5.10.137
from 5.11 before 5.15.61
from 5.16 before 5.18.18

Weakness classification

CWE-401

References