CVE-2022-49403: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49403 is a memory leak vulnerability in the Linux kernel's lib/string_helpers component, specifically in the devm_kasprintf_strarray() function. The vulnerability was discovered when allocated strarray was not being properly added to the device's resource list, causing memory to leak when the device disappears (Kernel Commit).

The vulnerability stems from a missing implementation in the devm_kasprintf_strarray() function where the allocated strarray was not being added to the device's resource list. This oversight prevented the automatic release of strarray when the device disappears, resulting in memory leaks in drivers that use devm_kasprintf_strarray(). The fix involves adding the allocated strarray to the device's resource list by setting ptr->n = n and calling devres_add(dev, ptr) (Kernel Commit).

The vulnerability affects drivers that use the devm_kasprintf_strarray() function, causing memory leaks when devices are removed or disappear from the system. This could potentially lead to system resource exhaustion over time (Kernel Commit).

The issue has been fixed by adding proper resource management code to the devm_kasprintf_strarray() function. The fix ensures that the allocated strarray is properly added to the device's resource list, allowing for automatic cleanup when the device is removed. Users should update to a patched version of the Linux kernel that includes the fix (Kernel Commit).