CVE-2022-49896
cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak
Published:
5/1/2025
Last updated:
10/1/2025
Reserved:
5/1/2025
In the Linux kernel, the following vulnerability has been resolved:
cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak
When a cxl_nvdimm object goes through a ->remove() event (device
physically removed, nvdimm-bridge disabled, or nvdimm device disabled),
then any associated regions must also be disabled. As highlighted by the
cxl-create-region.sh test [1], a single device may host multiple
regions, but the driver was only tracking one region at a time. This
leads to a situation where only the last enabled region per nvdimm
device is cleaned up properly. Other regions are leaked, and this also
causes cxl_memdev reference leaks.
Fix the tracking by allowing cxl_nvdimm objects to track multiple region
associations.
CNA assigner:
Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
Requested by:
n/a
Products affected (3)
| Product |
Vendor |
Version |
| Linux |
Linux
|
Linux Kernel v5.10-rc4,Linux Kernel v5.4.66,Linux Kernel v5.9.8
|
| Linux |
Linux
|
n/a
|
| Linux |
Linux
|
< 3.0.3-r32
|