Memory Leak in Linux Kernel Affects Multiple Products

CVE-2022-50466

What is CVE-2022-50466?

A memory leak vulnerability was discovered in the load_elf_binary function of the Linux kernel, which could result in unreferenced objects not being released. This issue is triggered when the interpreter file fails to allocate memory, leading to a failure in the proper release of resources. The vulnerability can affect the performance and stability of systems using the kernel by potentially consuming unnecessary memory. The issue has been addressed by implementing an error handling path that ensures resources are freed appropriately when allocation fails.

References