CVE-2022-48775
published 2024-07-16CVE-2022-48775: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
13.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
kobject_init_and_add() takes reference even when it fails.
According to the doc of kobject_init_and_add()：
If this function returns an error, kobject_put() must be called to
properly clean up the memory associated with the object.
Fix memory leak by calling kobject_put().
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.11-1 (bookworm) | linux 5.16.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c < 417947891bd5ae327f15efed1a0da2b12ef24962 | 417947891bd5ae327f15efed1a0da2b12ef24962 |
| linux | linux | >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c < fe595759c2a4a5bb41c438474f15947d8ae32f5c | fe595759c2a4a5bb41c438474f15947d8ae32f5c |
| linux | linux | >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c < 91d8866ca55232d21995a3d54fac96de33c9e20c | 91d8866ca55232d21995a3d54fac96de33c9e20c |
| linux | linux | >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c < c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9 | c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9 |
| linux | linux | >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c < 92e25b637cd4e010f776c86e4810300e773eac5c | 92e25b637cd4e010f776c86e4810300e773eac5c |
| linux | linux | >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c < 8bc69f86328e87a0ffa79438430cc82f3aa6a194 | 8bc69f86328e87a0ffa79438430cc82f3aa6a194 |
| linux | linux_kernel | >= 0 < 5.10.103-1 | 5.10.103-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 4.15 < 4.19.231 | 4.19.231 |
| linux | linux_kernel | >= 4.20 < 5.4.181 | 5.4.181 |
| linux | linux_kernel | >= 5.11 < 5.15.25 | 5.15.25 |
| linux | linux_kernel | >= 5.16 < 5.16.11 | 5.16.11 |
| linux | linux_kernel | >= 5.5 < 5.10.102 | 5.10.102 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
vendor_redhat·2024-07-16·CVSS 5.5
CVE-2022-48775 [MEDIUM] CWE-402 kernel: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
kernel: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
kobject_init_and_add() takes reference even when it fails.
According to the doc of kobject_init_and_add()：
If this function returns an error, kobject_put() must be called to
properly clean up the memory associated with the object.
Fix memory leak by calling kobject_put().
A flaw was found in the Linux kernel's Hyper-V VMBus driver, which involved a memory leak caused by improper handling of the kobject_init_and_add() function in vmbus_add_channel_kobj(). When this function fails, it still references the kobject, which must be released by calling kobject_put().
Statement: Red Hat Enterprise
Debian
CVE-2022-48775: linux - In the Linux kernel, the following vulnerability has been resolved: Drivers: hv...
vendor_debian·2022·CVSS 5.5
CVE-2022-48775 [MEDIUM] CVE-2022-48775: linux - In the Linux kernel, the following vulnerability has been resolved: Drivers: hv...
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().
Scope: local
bookworm: resolved (fixed in 5.16.11-1)
bullseye: resolved (fixed in 5.10.103-1)
forky: resolved (fixed in 5.16.11-1)
sid: resolved (fixed in 5.16.11-1)
trixie: resolved (fixed in 5.16.11-1)
OSV
CVE-2022-48775: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add
osv·2024-07-16·CVSS 5.5
CVE-2022-48775 [MEDIUM] CVE-2022-48775: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().
GHSA
GHSA-x27m-p9c5-jvf7: In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
kobject_init_and_a
ghsa_unreviewed·2024-07-16
CVE-2022-48775 [MEDIUM] CWE-401 GHSA-x27m-p9c5-jvf7: In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
kobject_init_and_a
In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
kobject_init_and_add() takes reference even when it fails.
According to the doc of kobject_init_and_add()：
If this function returns an error, kobject_put() must be called to
properly clean up the memory associated with the object.
Fix memory leak by calling kobject_put().
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/417947891bd5ae327f15efed1a0da2b12ef24962https://git.kernel.org/stable/c/8bc69f86328e87a0ffa79438430cc82f3aa6a194https://git.kernel.org/stable/c/91d8866ca55232d21995a3d54fac96de33c9e20chttps://git.kernel.org/stable/c/92e25b637cd4e010f776c86e4810300e773eac5chttps://git.kernel.org/stable/c/c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9https://git.kernel.org/stable/c/fe595759c2a4a5bb41c438474f15947d8ae32f5chttps://git.kernel.org/stable/c/417947891bd5ae327f15efed1a0da2b12ef24962https://git.kernel.org/stable/c/8bc69f86328e87a0ffa79438430cc82f3aa6a194https://git.kernel.org/stable/c/91d8866ca55232d21995a3d54fac96de33c9e20chttps://git.kernel.org/stable/c/92e25b637cd4e010f776c86e4810300e773eac5chttps://git.kernel.org/stable/c/c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9https://git.kernel.org/stable/c/fe595759c2a4a5bb41c438474f15947d8ae32f5c
2024-07-16
Published