CVE-2022-48775

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/417947891bd5ae327f15efed1a0da2b12ef24962	Mailing List Patch
https://git.kernel.org/stable/c/8bc69f86328e87a0ffa79438430cc82f3aa6a194	Mailing List Patch
https://git.kernel.org/stable/c/91d8866ca55232d21995a3d54fac96de33c9e20c	Mailing List Patch
https://git.kernel.org/stable/c/92e25b637cd4e010f776c86e4810300e773eac5c	Mailing List Patch
https://git.kernel.org/stable/c/c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9	Mailing List Patch
https://git.kernel.org/stable/c/fe595759c2a4a5bb41c438474f15947d8ae32f5c	Mailing List Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

11 Sep 2024, 18:15

Type	Values Removed	Values Added
Summary	(en) In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()? If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().	(en) In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().

21 Aug 2024, 17:47

Type	Values Removed	Values Added
CPE		cpe:2.3:o:linux:linux_kernel::::::::
Summary	(en) In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().	(en) In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()? If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().
CWE		CWE-401
References	~~() https://git.kernel.org/stable/c/417947891bd5ae327f15efed1a0da2b12ef24962 -~~	() https://git.kernel.org/stable/c/417947891bd5ae327f15efed1a0da2b12ef24962 - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/8bc69f86328e87a0ffa79438430cc82f3aa6a194 -~~	() https://git.kernel.org/stable/c/8bc69f86328e87a0ffa79438430cc82f3aa6a194 - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/91d8866ca55232d21995a3d54fac96de33c9e20c -~~	() https://git.kernel.org/stable/c/91d8866ca55232d21995a3d54fac96de33c9e20c - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/92e25b637cd4e010f776c86e4810300e773eac5c -~~	() https://git.kernel.org/stable/c/92e25b637cd4e010f776c86e4810300e773eac5c - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9 -~~	() https://git.kernel.org/stable/c/c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9 - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/fe595759c2a4a5bb41c438474f15947d8ae32f5c -~~	() https://git.kernel.org/stable/c/fe595759c2a4a5bb41c438474f15947d8ae32f5c - Mailing List, Patch
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
First Time		Linux linux Kernel Linux

03 Aug 2024, 16:15

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Controladores: hv: vmbus: corrige la pérdida de memoria en vmbus_add_channel_kobj kobject_init_and_add() toma referencia incluso cuando falla. ¿Según el documento de kobject_init_and_add()? Si esta función devuelve un error, se debe llamar a kobject_put() para limpiar adecuadamente la memoria asociada con el objeto. Solucione la pérdida de memoria llamando a kobject_put().
Summary	(en) In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()? If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().	(en) In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().

16 Jul 2024, 13:43

Type	Values Removed	Values Added
Summary	(en) In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().	(en) In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()? If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().

16 Jul 2024, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-07-16 12:15

Updated : 2024-09-11 18:15

NVD link : CVE-2022-48775

Mitre link : CVE-2022-48775

CVE.ORG link : CVE-2022-48775

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

5.5 /10