CVE-2022-48723
published 2024-06-20CVE-2022-48723: In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The issue happens in…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
13.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
spi: uniphier: fix reference count leak in uniphier_spi_probe()
The issue happens in several error paths in uniphier_spi_probe().
When either dma_get_slave_caps() or devm_spi_register_master() returns
an error code, the function forgets to decrease the refcount of both
`dma_rx` and `dma_tx` objects, which may lead to refcount leaks.
Fix it by decrementing the reference count of specific objects in
those error paths.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.10-1 (bookworm) | linux 5.16.10-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 28d1dddc59f6b7fc085093e7c1e978b33f0caf4c < e895e067d73e154b1ebc84a124e00831e311d9b0 | e895e067d73e154b1ebc84a124e00831e311d9b0 |
| linux | linux | >= 28d1dddc59f6b7fc085093e7c1e978b33f0caf4c < dd00b4f8f768d81c3788a8ac88fdb3d745e55ea3 | dd00b4f8f768d81c3788a8ac88fdb3d745e55ea3 |
| linux | linux | >= 28d1dddc59f6b7fc085093e7c1e978b33f0caf4c < 447c3d4046d7b54052d07d8b27e15e6edea5662c | 447c3d4046d7b54052d07d8b27e15e6edea5662c |
| linux | linux | >= 28d1dddc59f6b7fc085093e7c1e978b33f0caf4c < 37c2c83ca4f1ef4b6908181ac98e18360af89b42 | 37c2c83ca4f1ef4b6908181ac98e18360af89b42 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.103-1 | 5.10.103-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 5.11 < 5.15.22 | 5.15.22 |
| linux | linux_kernel | >= 5.16 < 5.16.8 | 5.16.8 |
| linux | linux_kernel | >= 5.6 < 5.10.99 | 5.10.99 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: spi: uniphier: fix reference count leak in uniphier_spi_probe()
vendor_redhat·2024-06-20·CVSS 5.5
CVE-2022-48723 [MEDIUM] CWE-402 kernel: spi: uniphier: fix reference count leak in uniphier_spi_probe()
kernel: spi: uniphier: fix reference count leak in uniphier_spi_probe()
In the Linux kernel, the following vulnerability has been resolved:
spi: uniphier: fix reference count leak in uniphier_spi_probe()
The issue happens in several error paths in uniphier_spi_probe().
When either dma_get_slave_caps() or devm_spi_register_master() returns
an error code, the function forgets to decrease the refcount of both
`dma_rx` and `dma_tx` objects, which may lead to refcount leaks.
Fix it by decrementing the reference count of specific objects in
those error paths.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not a
Debian
CVE-2022-48723: linux - In the Linux kernel, the following vulnerability has been resolved: spi: uniphi...
vendor_debian·2022·CVSS 5.5
CVE-2022-48723 [MEDIUM] CVE-2022-48723: linux - In the Linux kernel, the following vulnerability has been resolved: spi: uniphi...
In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The issue happens in several error paths in uniphier_spi_probe(). When either dma_get_slave_caps() or devm_spi_register_master() returns an error code, the function forgets to decrease the refcount of both `dma_rx` and `dma_tx` objects, which may lead to refcount leaks. Fix it by decrementing the reference count of specific objects in those error paths.
Scope: local
bookworm: resolved (fixed in 5.16.10-1)
bullseye: resolved (fixed in 5.10.103-1)
forky: resolved (fixed in 5.16.10-1)
sid: resolved (fixed in 5.16.10-1)
trixie: resolved (fixed in 5.16.10-1)
OSV
CVE-2022-48723: In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The issue happens
osv·2024-06-20·CVSS 5.5
CVE-2022-48723 [MEDIUM] CVE-2022-48723: In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The issue happens
In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The issue happens in several error paths in uniphier_spi_probe(). When either dma_get_slave_caps() or devm_spi_register_master() returns an error code, the function forgets to decrease the refcount of both `dma_rx` and `dma_tx` objects, which may lead to refcount leaks. Fix it by decrementing the reference count of specific objects in those error paths.
GHSA
GHSA-38c9-5x95-x8fq: In the Linux kernel, the following vulnerability has been resolved:
spi: uniphier: fix reference count leak in uniphier_spi_probe()
The issue happen
ghsa_unreviewed·2024-06-20
CVE-2022-48723 [MEDIUM] GHSA-38c9-5x95-x8fq: In the Linux kernel, the following vulnerability has been resolved:
spi: uniphier: fix reference count leak in uniphier_spi_probe()
The issue happen
In the Linux kernel, the following vulnerability has been resolved:
spi: uniphier: fix reference count leak in uniphier_spi_probe()
The issue happens in several error paths in uniphier_spi_probe().
When either dma_get_slave_caps() or devm_spi_register_master() returns
an error code, the function forgets to decrease the refcount of both
`dma_rx` and `dma_tx` objects, which may lead to refcount leaks.
Fix it by decrementing the reference count of specific objects in
those error paths.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/37c2c83ca4f1ef4b6908181ac98e18360af89b42https://git.kernel.org/stable/c/447c3d4046d7b54052d07d8b27e15e6edea5662chttps://git.kernel.org/stable/c/dd00b4f8f768d81c3788a8ac88fdb3d745e55ea3https://git.kernel.org/stable/c/e895e067d73e154b1ebc84a124e00831e311d9b0https://git.kernel.org/stable/c/37c2c83ca4f1ef4b6908181ac98e18360af89b42https://git.kernel.org/stable/c/447c3d4046d7b54052d07d8b27e15e6edea5662chttps://git.kernel.org/stable/c/dd00b4f8f768d81c3788a8ac88fdb3d745e55ea3https://git.kernel.org/stable/c/e895e067d73e154b1ebc84a124e00831e311d9b0
2024-06-20
Published