CVE-2022-49627

Summary

CVE-2022-49627 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the ima (Integrity Measuring Architecture) component, where a potential memory leak was discovered in the ima_init_crypto() function. If the SHA1 tfm (Template Matching Function) fails to be allocated, IMA (Integrity Measuring Architecture) fails to initialize and exits, leaving the ima_algo_array unfreed, leading to a memory leak. This vulnerability has been mitigated by adding the missing kfree() for ima_algo_array to prevent the potential memory leak.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.