CVE-2022-50836

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()

The kfree() should be called when of_irq_get_byname() fails or devm_request_threaded_irq() fails in qcom_add_sysmon_subdev(), otherwise there will be a memory leak, so add kfree() to fix it.

A memory leak occurs in qcom_add_sysmon_subdev when the sysmon structure is allocated but not freed if shutdown irq lookup fails or if devm_request_threaded_irq fails. This can lead to gradual memory consumption if the code path is exercised repeatedly through repeated remoteproc bring up attempts or error recovery loops. The issue is local to the host system because it requires access to operations that instantiate the remoteproc sysmon subdevice. For the CVSS the PR is L because remote processor management is typically restricted to privileged users or system services. The security impact is primarily availability degradation over time rather than a direct crash or code execution primitive. Confidentiality and integrity impacts are not expected because the flaw is a straightforward leak.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.