CVE-2022-49627

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ima: Fix potential memory leak in ima_init_crypto()

On failure to allocate the SHA1 tfm, IMA fails to initialize and exits without freeing the ima_algo_array. Add the missing kfree() for ima_algo_array to avoid the potential memory leak.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 6d94809af6b0830c4dfcad661535a5939bcb8a7d, < c1d9702ceb4a091da6bee380627596d1fba09274; >= 6d94809af6b0830c4dfcad661535a5939bcb8a7d, < 601ae26aa2802a4c10c94d7388a99eabdbefab2b; >= 6d94809af6b0830c4dfcad661535a5939bcb8a7d, < 830de9667b3ada0a75a3f098dfc7159709fe397b; >= 6d94809af6b0830c4dfcad661535a5939bcb8a7d, < 067d2521874135267e681c19d42761c601d503d6
LinuxLinux5.8

References

Timeline

Published
Feb 26, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-496285.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix leaks in probe These two error paths should clean up CVE-2022-496294.7In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix data-races around nexthop_compat_mode. While reading nextCVE-2022-49639.8A vulnerability was found in Folio Spring Module Core up to 1.1.5. It has been rated as critical. Affected by this issue is the function droCVE-2022-496304.7In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_ecn_fallback. While reading sysCVE-2022-496314.7In the Linux kernel, the following vulnerability has been resolved: raw: Fix a data-race around sysctl_raw_l3mdev_accept. While reading syCVE-2022-496324.7In the Linux kernel, the following vulnerability has been resolved: icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. WhCVE-2022-496334.7In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl_icmp_echo_enable_probe. While readiCVE-2022-496344.7In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data-races in proc_dou8vec_minmax(). A sysctl variable is CVE-2022-496357.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/selftests: fix subtraction overflow bug On some machines holeCVE-2022-496365.5In the Linux kernel, the following vulnerability has been resolved: vlan: fix memory leak in vlan_newlink() Blamed commit added back a bugCVE-2022-496374.7In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_sync_mem. While reading sysctlCVE-2022-496384.7In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variable
CVE-2022-49627: Medium severity, CVSS 5.5 | Vulnix