https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:01:37 +0000 https://vulnerability.circl.lu/vuln/cve-2022-50577 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ima: Fix memory leak in __ima_inode_hash()</p> <p>Commit f3cc6b25dcc5 (&#34;ima: always measure and audit files in policy&#34;) lets measurement or audit happen even if the file digest cannot be calculated.</p> <p>As a result, iint-&gt;ima_hash could have been allocated despite ima_collect_measurement() returning an error.</p> <p>Since ima_hash belongs to a temporary inode metadata structure, declared at the beginning of __ima_inode_hash(), just add a kfree() call if ima_collect_measurement() returns an error different from -ENOMEM (in that case, ima_hash should not have been allocated).</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ima: Fix memory leak in __ima_inode_hash()</p> <p>Commit f3cc6b25dcc5 (&#34;ima: always measure and audit files in policy&#34;) lets measurement or audit happen even if the file digest cannot be calculated.</p> <p>As a result, iint-&gt;ima_hash could have been allocated despite ima_collect_measurement() returning an error.</p> <p>Since ima_hash belongs to a temporary inode metadata structure, declared at the beginning of __ima_inode_hash(), just add a kfree() call if ima_collect_measurement() returns an error different from -ENOMEM (in that case, ima_hash should not have been allocated).</p> https://vulnerability.circl.lu/vuln/cve-2022-50577