CVE-2022-48863

Source
https://cve.org/CVERecord?id=CVE-2022-48863
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48863.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48863
Downstream
Related
Published
2024-07-16T12:25:26.482Z
Modified
2026-05-07T04:16:27.596541Z
Summary
mISDN: Fix memory leak in dsp_pipeline_build()
Details

In the Linux kernel, the following vulnerability has been resolved:

mISDN: Fix memory leak in dsppipelinebuild()

dsppipelinebuild() allocates dup pointer by kstrdup(cfg), but then it updates dup variable by strsep(&dup, "|"). As a result when it calls kfree(dup), the dup variable contains NULL.

Found by Linux Driver Verification project (linuxtesting.org) with SVACE.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48863.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
960366cf8dbb3359afaca30cf7fdbf69a6d6dda7
Fixed
a3d5fcc6cf2ecbba5a269631092570aa285a24cb
Fixed
7777b1f795af1bb43867375d8a776080111aae1b
Fixed
640445d6fc059d4514ffea79eb4196299e0e2d0f
Fixed
c6a502c2299941c8326d029cfc8a3bc8a4607ad5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48863.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.27
Fixed
5.10.106
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.29
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.16.15

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48863.json"