CVE-2022-48768
published 2024-06-20CVE-2022-48768: In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an error…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
11.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
tracing/histogram: Fix a potential memory leak for kstrdup()
kfree() is missing on an error path to free the memory allocated by
kstrdup():
p = param = kstrdup(data->params[i], GFP_KERNEL);
So it is better to free it via kfree(p).
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.7-1 (bookworm) | linux 5.16.7-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 38b67e60b6b582e81f9db1b2e7176cbbfbd3e574 < 8a8878ebb596281f50fc0b9a6e1f23f0d7f154e8 | 8a8878ebb596281f50fc0b9a6e1f23f0d7f154e8 |
| linux | linux | >= 5.4.19 < 5.4.176 | 5.4.176 |
| linux | linux | >= 5.5.6 < 5.6 | 5.6 |
| linux | linux | >= d380dcde9a07ca5de4805dee11f58a98ec0ad6ff < d71b06aa995007eafd247626d0669b9364c42ad7 | d71b06aa995007eafd247626d0669b9364c42ad7 |
| linux | linux | >= d380dcde9a07ca5de4805dee11f58a98ec0ad6ff < e33fa4a46ee22de88a700e2e3d033da8214a5175 | e33fa4a46ee22de88a700e2e3d033da8214a5175 |
| linux | linux | >= d380dcde9a07ca5de4805dee11f58a98ec0ad6ff < df86e2fe808c3536a9dba353cc2bebdfea00d0cf | df86e2fe808c3536a9dba353cc2bebdfea00d0cf |
| linux | linux | >= d380dcde9a07ca5de4805dee11f58a98ec0ad6ff < e629e7b525a179e29d53463d992bdee759c950fb | e629e7b525a179e29d53463d992bdee759c950fb |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.103-1 | 5.10.103-1 |
| linux | linux_kernel | >= 0 < 5.16.7-1 | 5.16.7-1 |
| linux | linux_kernel | >= 0 < 5.16.7-1 | 5.16.7-1 |
| linux | linux_kernel | >= 0 < 5.16.7-1 | 5.16.7-1 |
| linux | linux_kernel | >= 5.11 < 5.15.19 | 5.15.19 |
| linux | linux_kernel | >= 5.16 < 5.16.5 | 5.16.5 |
| linux | linux_kernel | >= 5.4.19 < 5.4.176 | 5.4.176 |
| linux | linux_kernel | >= 5.6 < 5.10.96 | 5.10.96 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: tracing/histogram: Fix a potential memory leak for kstrdup()
vendor_redhat·2024-06-20·CVSS 5.5
CVE-2022-48768 [MEDIUM] CWE-402 kernel: tracing/histogram: Fix a potential memory leak for kstrdup()
kernel: tracing/histogram: Fix a potential memory leak for kstrdup()
In the Linux kernel, the following vulnerability has been resolved:
tracing/histogram: Fix a potential memory leak for kstrdup()
kfree() is missing on an error path to free the memory allocated by
kstrdup():
p = param = kstrdup(data->params[i], GFP_KERNEL);
So it is better to free it via kfree(p).
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 9) - Fix defe
Debian
CVE-2022-48768: linux - In the Linux kernel, the following vulnerability has been resolved: tracing/his...
vendor_debian·2022·CVSS 5.5
CVE-2022-48768 [MEDIUM] CVE-2022-48768: linux - In the Linux kernel, the following vulnerability has been resolved: tracing/his...
In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an error path to free the memory allocated by kstrdup(): p = param = kstrdup(data->params[i], GFP_KERNEL); So it is better to free it via kfree(p).
Scope: local
bookworm: resolved (fixed in 5.16.7-1)
bullseye: resolved (fixed in 5.10.103-1)
forky: resolved (fixed in 5.16.7-1)
sid: resolved (fixed in 5.16.7-1)
trixie: resolved (fixed in 5.16.7-1)
OSV
CVE-2022-48768: In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on
osv·2024-06-20·CVSS 5.5
CVE-2022-48768 [MEDIUM] CVE-2022-48768: In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on
In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an error path to free the memory allocated by kstrdup(): p = param = kstrdup(data->params[i], GFP_KERNEL); So it is better to free it via kfree(p).
GHSA
GHSA-pwf7-jc5h-rr33: In the Linux kernel, the following vulnerability has been resolved:
tracing/histogram: Fix a potential memory leak for kstrdup()
kfree() is missing
ghsa_unreviewed·2024-06-20
CVE-2022-48768 [MEDIUM] CWE-401 GHSA-pwf7-jc5h-rr33: In the Linux kernel, the following vulnerability has been resolved:
tracing/histogram: Fix a potential memory leak for kstrdup()
kfree() is missing
In the Linux kernel, the following vulnerability has been resolved:
tracing/histogram: Fix a potential memory leak for kstrdup()
kfree() is missing on an error path to free the memory allocated by
kstrdup():
p = param = kstrdup(data->params[i], GFP_KERNEL);
So it is better to free it via kfree(p).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/8a8878ebb596281f50fc0b9a6e1f23f0d7f154e8https://git.kernel.org/stable/c/d71b06aa995007eafd247626d0669b9364c42ad7https://git.kernel.org/stable/c/df86e2fe808c3536a9dba353cc2bebdfea00d0cfhttps://git.kernel.org/stable/c/e33fa4a46ee22de88a700e2e3d033da8214a5175https://git.kernel.org/stable/c/e629e7b525a179e29d53463d992bdee759c950fbhttps://git.kernel.org/stable/c/8a8878ebb596281f50fc0b9a6e1f23f0d7f154e8https://git.kernel.org/stable/c/d71b06aa995007eafd247626d0669b9364c42ad7https://git.kernel.org/stable/c/df86e2fe808c3536a9dba353cc2bebdfea00d0cfhttps://git.kernel.org/stable/c/e33fa4a46ee22de88a700e2e3d033da8214a5175https://git.kernel.org/stable/c/e629e7b525a179e29d53463d992bdee759c950fb
2024-06-20
Published