{"id":"DEBIAN-CVE-2022-49901","details":"In the Linux kernel, the following vulnerability has been resolved:  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue  There is a kmemleak caused by modprobe null_blk.ko  unreferenced object 0xffff8881acb1f000 (size 1024):   comm \"modprobe\", pid 836, jiffies 4294971190 (age 27.068s)   hex dump (first 32 bytes):     00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00  .....N..........     ff ff ff ff ff ff ff ff 00 53 99 9e ff ff ff ff  .........S......   backtrace:     [\u003c000000004a10c249\u003e] kmalloc_node_trace+0x22/0x60     [\u003c00000000648f7950\u003e] blk_mq_alloc_and_init_hctx+0x289/0x350     [\u003c00000000af06de0e\u003e] blk_mq_realloc_hw_ctxs+0x2fe/0x3d0     [\u003c00000000e00c1872\u003e] blk_mq_init_allocated_queue+0x48c/0x1440     [\u003c00000000d16b4e68\u003e] __blk_mq_alloc_disk+0xc8/0x1c0     [\u003c00000000d10c98c3\u003e] 0xffffffffc450d69d     [\u003c00000000b9299f48\u003e] 0xffffffffc4538392     [\u003c0000000061c39ed6\u003e] do_one_initcall+0xd0/0x4f0     [\u003c00000000b389383b\u003e] do_init_module+0x1a4/0x680     [\u003c0000000087cf3542\u003e] load_module+0x6249/0x7110     [\u003c00000000beba61b8\u003e] __do_sys_finit_module+0x140/0x200     [\u003c00000000fdcfff51\u003e] do_syscall_64+0x35/0x80     [\u003c000000003c0f1f71\u003e] entry_SYSCALL_64_after_hwframe+0x46/0xb0  That is because q-\u003ema_ops is set to NULL before blk_release_queue is called.  blk_mq_init_queue_data   blk_mq_init_allocated_queue     blk_mq_realloc_hw_ctxs       for (i = 0; i \u003c set-\u003enr_hw_queues; i++) {         old_hctx = xa_load(&q-\u003ehctx_table, i);         if (!blk_mq_alloc_and_init_hctx(.., i, ..))\t\t[1]           if (!old_hctx) \t    break;        xa_for_each_start(&q-\u003ehctx_table, j, hctx, j)         blk_mq_exit_hctx(q, set, hctx, j); \t\t\t[2]      if (!q-\u003enr_hw_queues)\t\t\t\t\t[3]       goto err_hctxs;    err_exit:       q-\u003emq_ops = NULL;\t\t\t  \t\t\t[4]    blk_put_queue     blk_release_queue       if (queue_is_mq(q))\t\t\t\t\t[5]         blk_mq_release(q);  [1]: blk_mq_alloc_and_init_hctx failed at i != 0. [2]: The hctxs allocated by [1] are moved to q-\u003eunused_hctx_list and will be cleaned up in blk_mq_release. [3]: q-\u003enr_hw_queues is 0. [4]: Set q-\u003emq_ops to NULL. [5]: queue_is_mq returns false due to [4]. And blk_mq_release will not be called. The hctxs in q-\u003eunused_hctx_list are leaked.  To fix it, call blk_release_queue in exception path.","modified":"2026-09-01T16:05:33.648876988Z","published":"2025-05-01T15:16:15.167Z","upstream":["CVE-2022-49901"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-49901"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49901.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49901.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49901.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}