CVE-2022-49746: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability was identified in the Linux kernel's DMA engine, specifically in the IMX SDMA driver (CVE-2022-49746). The issue was discovered and disclosed on March 27, 2025, affecting the dmaengine subsystem in the Linux kernel (NVD).

The vulnerability occurs in the sdmatransferinit function of the IMX SDMA driver. When the sdmaloadcontext() function fails, the sdma_desc is properly freed, but the allocated desc->bd memory remains unreleased, resulting in a memory leak. This condition has been observed with the error message 'imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready' (NVD).

The memory leak can lead to gradual system resource depletion over time, potentially affecting system stability and performance. The issue specifically impacts systems using the IMX SDMA driver in the Linux kernel (Ubuntu).

The vulnerability has been patched in various Linux distributions. Ubuntu has released fixes for multiple versions: Ubuntu 22.04 LTS (linux 5.15.0-70.77), Ubuntu 20.04 LTS (linux 5.4.0-147.164), and other supported versions. Similar fixes have been implemented across different kernel variants including linux-aws, linux-azure, and linux-gcp (Ubuntu).