Bug 2083455 (CVE-2022-1651)

Summary:	CVE-2022-1651 kernel: A memory leak problem in acrn_dev_ioctl()
Product:	[Other] Security Response	Reporter:	Rohit Keshri <rkeshri>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	acaringi, adscvr, airlied, alciregi, bdettelb, bhu, bskeggs, chwhite, ddepaula, dvlasenk, hdegoede, hkrzesin, hpa, jarod, jarodwilson, jburrell, jfaracco, jferlan, jforbes, jglisse, jlelli, joe.lawrence, jonathan, josef, jpazdziora, jshortt, jstancek, jwboyer, jwyatt, kcarcia, kernel-maint, kernel-mgr, lgoncalv, linville, lzampier, masami256, mchehab, nmurray, ptalbert, qzhao, rvrbovsk, scweaver, steved, swood, vkumar, walters, williams
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	kernel 5.18 rc1	Doc Type:	If docs needed, set a value
Doc Text:	A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-05-10 18:33:21 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2083718, 2083719
Bug Blocks:	2083452, 2083636

Description Rohit Keshri 2022-05-10 07:06:23 UTC

A memory leak problem was found in acrn_dev_ioctl in drivers/virt/acrn/hsm.c in ACRN Device Model emulates virtual NICs in VM. This flaw may allow a local privileged attacker to leak kernel unauthorized information, and may also cause a denial of service problem.

#Fix
Now the patch for this issue is available upstream.
1.https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ecd1735f14d6ac868ae5d8b7a2bf193fa11f388b
2.https://lore.kernel.org/all/20220308092047.1008409-1-butterflyhuangxx@gmail.com/

Comment 11 Product Security DevOps Team 2023-05-10 18:33:16 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-1651

Comment 12 Jan Pazdziora 2023-07-28 17:01:41 UTC

Hello, the CVE page https://access.redhat.com/security/cve/CVE-2022-1651 Statement paragraph says

The affected code was not introduced into any kernel versions shipped with Red Hat Enterprise Linux making this vulnerable and not applicable to these platforms.

Should that be "making this vulnerability not applicable" or something similar?

Also, given we list all RHEL versions Not affected, why do we include that Mitigation section on that CVE page?