Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: comedi: Fix memory leak in compat_insnlist() `compat_insnlist()` handles the 32-bit version of the `COMEDI_INSNLIST` ioctl (whenwhen `CONFIG_COMPAT` is enabled). It allocates memory to temporarily hold an array of `struct comedi_insn` converted from the 32-bit version in user space. This memory is only being freed if there is a fault while filling the array, otherwise it is leaked. Add a call to `kfree()` to fix the leak.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected b8d47d8813055ce38c0d2ad913d5462017e52692 before 8d6a21e4cd6a319b0662cbe4ad6199e276ac776a; affected b8d47d8813055ce38c0d2ad913d5462017e52692 before f217b6c1e28ed0b353634ce4d92a155b80bd1671; affected b8d47d8813055ce38c0d2ad913d5462017e52692 before bb509a6ffed2c8b0950f637ab5779aa818ed1596 |
| Linux / Linux | affected 5.8; unaffected 0 before 5.8; unaffected 5.10.70 through 5.10.*; unaffected 5.14.9 through 5.14.*; unaffected 5.15 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/8d6a21e4cd6a319b0662cbe4ad6199e276ac776a
- https://git.kernel.org/stable/c/f217b6c1e28ed0b353634ce4d92a155b80bd1671
- https://git.kernel.org/stable/c/bb509a6ffed2c8b0950f637ab5779aa818ed1596
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.