CVE-2022-49746: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-27 · updated 2026-06-17
Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdma_load_context() fails, the sdma_desc will be freed, but the allocated desc->bd is forgot to be freed. We already met the sdma_load_context() failure case and the log as below: [ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready ... In this case, the desc->bd will not be freed without this change.

Affected products

Linux kernel: before 4.19.272; from 4.20 before 5.4.231; from 5.5 before 5.10.167; from 5.11 before 5.15.92; from 5.16 before 6.1.10; 6.2-rc1, 6.2-rc2, 6.2-rc3, 6.2-rc4 — fixed in 4.19.272, 5.10.167, 5.15.92, 5.4.231, 6.1.10

How to fix

Upgrade to a fixed version: Linux kernel 4.19.272, 5.10.167, 5.15.92, 5.4.231. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-49746 or the next vulnerability affects your stack