Refcount Leak in Linux Kernel: PowerPC/XIVE Vulnerability in Debian Packages
Summary
CVE-2022-49437: In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: Fix refcount leak in xive_spapr_init of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the Debian operating system, providing essential services for hardware and software interaction. It is known for its stability, performance, and versatility across various architectures. The kernel is responsible for managing system resources and facilitating communication between hardware and software. This vulnerability specifically affects the PowerPC architecture's XIVE interrupt handling, which is crucial for efficient system performance and stability.
Vulnerability Detail
In the Linux kernel, a refcount leak was discovered in the xive_spapr_init function. The issue arises from the of_find_compatible_node() function, which returns a node pointer with an incremented reference count. Failure to call of_node_put() after using this pointer leads to a memory leak, potentially resulting in resource exhaustion and degraded system performance over time. This vulnerability can be exploited if an attacker is able to manipulate the kernel's memory management, leading to potential denial of service or other malicious activities.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability other than applying the patch. Users are advised to monitor their systems for any unusual behavior until the update can be applied.
Conclusion
CVE-2022-49437 represents a significant vulnerability in the Linux kernel affecting PowerPC/XIVE interrupt handling. Users are urged to update their systems to the patched version to mitigate potential risks associated with this refcount leak. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49437 is a vulnerability in the Linux kernel related to a refcount leak in the PowerPC/XIVE interrupt handling, which can lead to resource exhaustion.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to memory leaks, which may result in degraded system performance and potential denial of service.
Yes, a patch is available in the form of the Linux kernel version 5.18.5-1 for Debian 12 and 13.
While there are no specific workarounds, it is advisable to monitor your system for unusual behavior and apply the update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
