CVE-2022-48775

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48775
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add(): If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/417947891bd5ae327f15efed1a0da2b12ef24962 Mailing List Patch
https://git.kernel.org/stable/c/fe595759c2a4a5bb41c438474f15947d8ae32f5c Mailing List Patch
https://git.kernel.org/stable/c/91d8866ca55232d21995a3d54fac96de33c9e20c Mailing List Patch
https://git.kernel.org/stable/c/c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9 Mailing List Patch
https://git.kernel.org/stable/c/92e25b637cd4e010f776c86e4810300e773eac5c Mailing List Patch
https://git.kernel.org/stable/c/8bc69f86328e87a0ffa79438430cc82f3aa6a194 Mailing List Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

11 Sep 2024, 18:15

Type Values Removed Values Added
Summary In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()? If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put(). In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add(): If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().

21 Aug 2024, 17:47

Type Values Removed Values Added
CWE CWE-401
Summary In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add(): If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put(). In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()? If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/8bc69f86328e87a0ffa79438430cc82f3aa6a194 - () https://git.kernel.org/stable/c/8bc69f86328e87a0ffa79438430cc82f3aa6a194 - Mailing List, Patch
References () https://git.kernel.org/stable/c/417947891bd5ae327f15efed1a0da2b12ef24962 - () https://git.kernel.org/stable/c/417947891bd5ae327f15efed1a0da2b12ef24962 - Mailing List, Patch
References () https://git.kernel.org/stable/c/91d8866ca55232d21995a3d54fac96de33c9e20c - () https://git.kernel.org/stable/c/91d8866ca55232d21995a3d54fac96de33c9e20c - Mailing List, Patch
References () https://git.kernel.org/stable/c/92e25b637cd4e010f776c86e4810300e773eac5c - () https://git.kernel.org/stable/c/92e25b637cd4e010f776c86e4810300e773eac5c - Mailing List, Patch
References () https://git.kernel.org/stable/c/fe595759c2a4a5bb41c438474f15947d8ae32f5c - () https://git.kernel.org/stable/c/fe595759c2a4a5bb41c438474f15947d8ae32f5c - Mailing List, Patch
References () https://git.kernel.org/stable/c/c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9 - () https://git.kernel.org/stable/c/c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9 - Mailing List, Patch

03 Aug 2024, 16:15

Type Values Removed Values Added
Summary In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()? If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put(). In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add(): If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().

16 Jul 2024, 13:43

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-16 12:15

Updated : 2024-09-11 18:15

NVD link : CVE-2022-48775

Mitre link : CVE-2022-48775

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime