In the Linux kernel, the following vulnerability has been resolved:
mISDN: Fix memory leak in dsppipelinebuild()
dsppipelinebuild() allocates dup pointer by kstrdup(cfg), but then it updates dup variable by strsep(&dup, "|"). As a result when it calls kfree(dup), the dup variable contains NULL.
Found by Linux Driver Verification project (linuxtesting.org) with SVACE.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"296879416033862407978665884924069639944",
"31100363822765093866712552050197777019",
"183655624939803943991923167197873590736",
"305963996203664543434676241433377649681",
"189228452097163188347078428725418895648",
"283422280220103521908032299006668304937",
"131487280980922698795063053228295710268",
"166888725251063390775772054466207852716",
"74593600084055770587048626550091440201",
"264180081354333703317343091065077338103",
"227070616084647441062170577508896928381"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3d5fcc6cf2ecbba5a269631092570aa285a24cb",
"signature_version": "v1",
"id": "CVE-2022-48863-096d3724"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"296879416033862407978665884924069639944",
"31100363822765093866712552050197777019",
"183655624939803943991923167197873590736",
"305963996203664543434676241433377649681",
"189228452097163188347078428725418895648",
"283422280220103521908032299006668304937",
"131487280980922698795063053228295710268",
"166888725251063390775772054466207852716",
"74593600084055770587048626550091440201",
"264180081354333703317343091065077338103",
"227070616084647441062170577508896928381"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7777b1f795af1bb43867375d8a776080111aae1b",
"signature_version": "v1",
"id": "CVE-2022-48863-49c6e553"
},
{
"digest": {
"function_hash": "107179864194412575015473336847473989386",
"length": 1556.0
},
"signature_type": "Function",
"target": {
"function": "dsp_pipeline_build",
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3d5fcc6cf2ecbba5a269631092570aa285a24cb",
"signature_version": "v1",
"id": "CVE-2022-48863-a0fbbf69"
},
{
"digest": {
"function_hash": "107179864194412575015473336847473989386",
"length": 1556.0
},
"signature_type": "Function",
"target": {
"function": "dsp_pipeline_build",
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7777b1f795af1bb43867375d8a776080111aae1b",
"signature_version": "v1",
"id": "CVE-2022-48863-fc91bd96"
}
]