CVE-2022-48753

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-48753

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-48753

Related

Published

2024-06-20T12:15:13Z

Modified

2024-10-30T16:35:06Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

In the Linux kernel, the following vulnerability has been resolved:

block: fix memory leak in diskregisterindependentaccessranges

kobjectinitandadd() takes reference even when it fails. According to the doc of kobjectinitandadd()

If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object.

Fix this issue by adding kobjectput(). Callback function blkiarangessysfsrelease() in kobjectput() can handle the pointer "iars" properly.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.16.7-1

{
    "urgency": "not yet assigned"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.16.7-1

{
    "urgency": "not yet assigned"
}