CVE-2022-48860

In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemaclite_of_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak. As the remove function do.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/1852854ee349881efb78ccdbbb237838975902e4	Patch
https://git.kernel.org/stable/c/5e7c402892e189a7bc152b125e72261154aa585d	Patch
https://git.kernel.org/stable/c/669172ce976608b25a2f76f3c65d47f042d125c9	Patch
https://git.kernel.org/stable/c/8609e29611befc4bfbe7a91bb50fc65ae72ff549	Patch
https://git.kernel.org/stable/c/8ee065a7a9b6a3976c16340503677efc4d8351f6	Patch
https://git.kernel.org/stable/c/979b418b96e35f07136f77962ccfaa54cf3e30e1	Patch
https://git.kernel.org/stable/c/b19ab4b38b06aae12442b2de95ccf58b5dc53584	Patch
https://git.kernel.org/stable/c/b7220f8e9d6c6b9594ddfb3125dad938cd478b1f	Patch
https://git.kernel.org/stable/c/1852854ee349881efb78ccdbbb237838975902e4	Patch
https://git.kernel.org/stable/c/5e7c402892e189a7bc152b125e72261154aa585d	Patch
https://git.kernel.org/stable/c/669172ce976608b25a2f76f3c65d47f042d125c9	Patch
https://git.kernel.org/stable/c/8609e29611befc4bfbe7a91bb50fc65ae72ff549	Patch
https://git.kernel.org/stable/c/8ee065a7a9b6a3976c16340503677efc4d8351f6	Patch
https://git.kernel.org/stable/c/979b418b96e35f07136f77962ccfaa54cf3e30e1	Patch
https://git.kernel.org/stable/c/b19ab4b38b06aae12442b2de95ccf58b5dc53584	Patch
https://git.kernel.org/stable/c/b7220f8e9d6c6b9594ddfb3125dad938cd478b1f	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

21 Nov 2024, 07:34

Type	Values Removed	Values Added
References	~~() https://git.kernel.org/stable/c/1852854ee349881efb78ccdbbb237838975902e4 - Patch~~	() https://git.kernel.org/stable/c/1852854ee349881efb78ccdbbb237838975902e4 - Patch
References	~~() https://git.kernel.org/stable/c/5e7c402892e189a7bc152b125e72261154aa585d - Patch~~	() https://git.kernel.org/stable/c/5e7c402892e189a7bc152b125e72261154aa585d - Patch
References	~~() https://git.kernel.org/stable/c/669172ce976608b25a2f76f3c65d47f042d125c9 - Patch~~	() https://git.kernel.org/stable/c/669172ce976608b25a2f76f3c65d47f042d125c9 - Patch
References	~~() https://git.kernel.org/stable/c/8609e29611befc4bfbe7a91bb50fc65ae72ff549 - Patch~~	() https://git.kernel.org/stable/c/8609e29611befc4bfbe7a91bb50fc65ae72ff549 - Patch
References	~~() https://git.kernel.org/stable/c/8ee065a7a9b6a3976c16340503677efc4d8351f6 - Patch~~	() https://git.kernel.org/stable/c/8ee065a7a9b6a3976c16340503677efc4d8351f6 - Patch
References	~~() https://git.kernel.org/stable/c/979b418b96e35f07136f77962ccfaa54cf3e30e1 - Patch~~	() https://git.kernel.org/stable/c/979b418b96e35f07136f77962ccfaa54cf3e30e1 - Patch
References	~~() https://git.kernel.org/stable/c/b19ab4b38b06aae12442b2de95ccf58b5dc53584 - Patch~~	() https://git.kernel.org/stable/c/b19ab4b38b06aae12442b2de95ccf58b5dc53584 - Patch
References	~~() https://git.kernel.org/stable/c/b7220f8e9d6c6b9594ddfb3125dad938cd478b1f - Patch~~	() https://git.kernel.org/stable/c/b7220f8e9d6c6b9594ddfb3125dad938cd478b1f - Patch

23 Jul 2024, 15:02

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ethernet: corrige el manejo de errores en xemaclite_of_probe Este puntero de nodo lo devuelve of_parse_phandle() con refcount incrementado en esta función. Llamar a of_node_put() para evitar la fuga de recuento. Como lo hace la función de eliminación.
References	~~() https://git.kernel.org/stable/c/1852854ee349881efb78ccdbbb237838975902e4 -~~	() https://git.kernel.org/stable/c/1852854ee349881efb78ccdbbb237838975902e4 - Patch
References	~~() https://git.kernel.org/stable/c/5e7c402892e189a7bc152b125e72261154aa585d -~~	() https://git.kernel.org/stable/c/5e7c402892e189a7bc152b125e72261154aa585d - Patch
References	~~() https://git.kernel.org/stable/c/669172ce976608b25a2f76f3c65d47f042d125c9 -~~	() https://git.kernel.org/stable/c/669172ce976608b25a2f76f3c65d47f042d125c9 - Patch
References	~~() https://git.kernel.org/stable/c/8609e29611befc4bfbe7a91bb50fc65ae72ff549 -~~	() https://git.kernel.org/stable/c/8609e29611befc4bfbe7a91bb50fc65ae72ff549 - Patch
References	~~() https://git.kernel.org/stable/c/8ee065a7a9b6a3976c16340503677efc4d8351f6 -~~	() https://git.kernel.org/stable/c/8ee065a7a9b6a3976c16340503677efc4d8351f6 - Patch
References	~~() https://git.kernel.org/stable/c/979b418b96e35f07136f77962ccfaa54cf3e30e1 -~~	() https://git.kernel.org/stable/c/979b418b96e35f07136f77962ccfaa54cf3e30e1 - Patch
References	~~() https://git.kernel.org/stable/c/b19ab4b38b06aae12442b2de95ccf58b5dc53584 -~~	() https://git.kernel.org/stable/c/b19ab4b38b06aae12442b2de95ccf58b5dc53584 - Patch
References	~~() https://git.kernel.org/stable/c/b7220f8e9d6c6b9594ddfb3125dad938cd478b1f -~~	() https://git.kernel.org/stable/c/b7220f8e9d6c6b9594ddfb3125dad938cd478b1f - Patch
CPE		cpe:2.3:o:linux:linux_kernel::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
CWE		CWE-401
First Time		Linux Linux linux Kernel

16 Jul 2024, 13:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-07-16 13:15

Updated : 2024-11-21 07:34

NVD link : CVE-2022-48860

Mitre link : CVE-2022-48860

CVE.ORG link : CVE-2022-48860

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

5.5 /10