CVE-2022-48955

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-48955
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48955.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48955
Downstream
Related
Published
2024-10-21T20:05:41Z
Modified
2025-10-08T07:14:31.700402Z
Summary
net: thunderbolt: fix memory leak in tbnet_open()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: thunderbolt: fix memory leak in tbnet_open()

When tbringallocrx() failed in tbnetopen(), ida that allocated in tbxdomainallocouthopid() is not released. Add tbxdomainreleaseouthopid() to the error path to release ida.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
180b0689425c6fb2b35e69a3316ee38371a782df
Fixed
b9274dbe399952a8175db2e1ee148b7c9ba2b538
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
180b0689425c6fb2b35e69a3316ee38371a782df
Fixed
ed6e955f3b7e0e622c080f4bcb5427a5e1af4c2a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
180b0689425c6fb2b35e69a3316ee38371a782df
Fixed
ed14e5903638f6eb868e3e2b4e610985e6a6c876

Affected versions

v5.*

v5.12
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.6
v5.15.60
v5.15.61
v5.15.62
v5.15.63
v5.15.64
v5.15.65
v5.15.66
v5.15.67
v5.15.68
v5.15.69
v5.15.7
v5.15.70
v5.15.71
v5.15.72
v5.15.73
v5.15.74
v5.15.75
v5.15.76
v5.15.77
v5.15.78
v5.15.79
v5.15.8
v5.15.80
v5.15.81
v5.15.82
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.8
v6.0.9
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7

Database specific

{
    "vanir_signatures": [
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed14e5903638f6eb868e3e2b4e610985e6a6c876",
            "target": {
                "file": "drivers/net/thunderbolt.c"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "149602939294199608708423354025860866660",
                    "142175130335522321950132129001940717160",
                    "256629084675598105056589931744669633432",
                    "58287022748074149626796150515499060250"
                ]
            },
            "id": "CVE-2022-48955-278c9d8b",
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9274dbe399952a8175db2e1ee148b7c9ba2b538",
            "target": {
                "file": "drivers/net/thunderbolt.c",
                "function": "tbnet_open"
            },
            "digest": {
                "length": 1033.0,
                "function_hash": "105442536895876268531941030421702297114"
            },
            "id": "CVE-2022-48955-29d814ec",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed14e5903638f6eb868e3e2b4e610985e6a6c876",
            "target": {
                "file": "drivers/net/thunderbolt.c",
                "function": "tbnet_open"
            },
            "digest": {
                "length": 1170.0,
                "function_hash": "263517647415095455057674492119355437188"
            },
            "id": "CVE-2022-48955-4179b044",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed6e955f3b7e0e622c080f4bcb5427a5e1af4c2a",
            "target": {
                "file": "drivers/net/thunderbolt.c"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "113011196470000458410548370301006388118",
                    "30021910671361068046494023673066456183",
                    "256629084675598105056589931744669633432",
                    "58287022748074149626796150515499060250"
                ]
            },
            "id": "CVE-2022-48955-999e2528",
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9274dbe399952a8175db2e1ee148b7c9ba2b538",
            "target": {
                "file": "drivers/net/thunderbolt.c"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "113011196470000458410548370301006388118",
                    "30021910671361068046494023673066456183",
                    "256629084675598105056589931744669633432",
                    "58287022748074149626796150515499060250"
                ]
            },
            "id": "CVE-2022-48955-c1e3dcf5",
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed6e955f3b7e0e622c080f4bcb5427a5e1af4c2a",
            "target": {
                "file": "drivers/net/thunderbolt.c",
                "function": "tbnet_open"
            },
            "digest": {
                "length": 1033.0,
                "function_hash": "105442536895876268531941030421702297114"
            },
            "id": "CVE-2022-48955-d7a9f439",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
5.15.83
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.13