Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Introducing Wiz Defend: Redefining a new standard for cloud detection and response
Vulnerability DatabaseCVE-2022-49091
CVE-2022-49091:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2022-49091 is a memory leak vulnerability discovered in the Linux kernel's DRM (Direct Rendering Manager) subsystem, specifically in the IMX parallel display driver. The vulnerability was identified and fixed in early 2022, affecting the imxpdconnectorgetmodes function in the Linux kernel's display driver component (Kernel Git).
Technical details
The vulnerability occurs in the drivers/gpu/drm/imx/parallel-display.c file where the display mode variable is not properly freed if the ofgetdrmdisplaymode function fails. This issue was identified by Coverity scan with ID 1443943 as a resource leak. The bug was introduced in commit 76ecd9c9fb24 which added return code checking from ofgetdrmdisplaymode() but failed to handle cleanup properly (Kernel Git).
Impact
The vulnerability results in a memory leak in the Linux kernel's display subsystem. While memory leaks in kernel space can potentially lead to system resource exhaustion over time, this particular issue has limited impact as it only occurs under specific error conditions when initializing IMX parallel displays (Debian Tracker).
Mitigation and workarounds
The vulnerability has been fixed in multiple Linux kernel versions. The fix involves properly freeing the display mode variable when ofgetdrmdisplaymode fails by adding a drmmodedestroy call. Updated kernel packages are available for various distributions including Debian Bullseye (5.10.234-1), Bookworm (6.1.129-1), and Sid/Trixie (6.12.17-1) (Debian Tracker).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management