CVE-2022-49896
cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak
Published:
5/1/2025
Last updated:
5/11/2026
Reserved:
5/1/2025
In the Linux kernel, the following vulnerability has been resolved:
cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak
When a cxl_nvdimm object goes through a ->remove() event (device
physically removed, nvdimm-bridge disabled, or nvdimm device disabled),
then any associated regions must also be disabled. As highlighted by the
cxl-create-region.sh test [1], a single device may host multiple
regions, but the driver was only tracking one region at a time. This
leads to a situation where only the last enabled region per nvdimm
device is cleaned up properly. Other regions are leaked, and this also
causes cxl_memdev reference leaks.
Fix the tracking by allowing cxl_nvdimm objects to track multiple region
associations.
CNA assigner:
Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
Requested by:
n/a
Products affected (4)
| Product |
Vendor |
Version |
| Linux |
Linux
|
8.5.0 to 8.5.15
|
| Linux |
Linux
|
8.0.0.RC1 to 8.0.44
|
| Linux |
Linux
|
32-bit Systems Service Pack 1
|
| Linux |
Linux
|
x64-based Systems Service Pack 1
|