CVE-2022-48905
published 2024-08-22CVE-2022-48905: In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing the reset…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
11.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
ibmvnic: free reset-work-item when flushing
Fix a tiny memory leak when flushing the reset work queue.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.14-1 (bookworm) | linux 5.16.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2770a7984db588913e11a6dfcfe3461dbba9b7b2 < 786576c03b313a9ff6585458aa0dfd039d897f51 | 786576c03b313a9ff6585458aa0dfd039d897f51 |
| linux | linux | >= 2770a7984db588913e11a6dfcfe3461dbba9b7b2 < 58b07100c20e95c78b8cb4d6d28ca53eb9ef81f2 | 58b07100c20e95c78b8cb4d6d28ca53eb9ef81f2 |
| linux | linux | >= 2770a7984db588913e11a6dfcfe3461dbba9b7b2 < 6acbc8875282d3ca8a73fa93cd7a9b166de5019c | 6acbc8875282d3ca8a73fa93cd7a9b166de5019c |
| linux | linux | >= 2770a7984db588913e11a6dfcfe3461dbba9b7b2 < 39738a2346b270e8f72f88d8856de2c167bd2899 | 39738a2346b270e8f72f88d8856de2c167bd2899 |
| linux | linux | >= 2770a7984db588913e11a6dfcfe3461dbba9b7b2 < 4c26745e4576cec224092e6cc12e37829333b183 | 4c26745e4576cec224092e6cc12e37829333b183 |
| linux | linux | >= 2770a7984db588913e11a6dfcfe3461dbba9b7b2 < 8d0657f39f487d904fca713e0bc39c2707382553 | 8d0657f39f487d904fca713e0bc39c2707382553 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.106-1 | 5.10.106-1 |
| linux | linux_kernel | >= 0 < 5.16.14-1 | 5.16.14-1 |
| linux | linux_kernel | >= 0 < 5.16.14-1 | 5.16.14-1 |
| linux | linux_kernel | >= 0 < 5.16.14-1 | 5.16.14-1 |
| linux | linux_kernel | >= 4.18 < 4.19.233 | 4.19.233 |
| linux | linux_kernel | >= 4.20 < 5.4.183 | 5.4.183 |
| linux | linux_kernel | >= 5.11 < 5.15.27 | 5.15.27 |
| linux | linux_kernel | >= 5.16 < 5.16.13 | 5.16.13 |
| linux | linux_kernel | >= 5.5 < 5.10.104 | 5.10.104 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ibmvnic: free reset-work-item when flushing
vendor_redhat·2024-08-22·CVSS 5.5
CVE-2022-48905 [MEDIUM] CWE-401 kernel: ibmvnic: free reset-work-item when flushing
kernel: ibmvnic: free reset-work-item when flushing
In the Linux kernel, the following vulnerability has been resolved:
ibmvnic: free reset-work-item when flushing
Fix a tiny memory leak when flushing the reset work queue.
A memory leak flaw was found in the Linux kernel’s IBM Virtual Network Interface Controller (ibmvnic ) driver. This issue involved not properly freeing memory associated with a reset work item when the reset work queue is flushed, causing the reset-work-item not to be deallocated. This flaw allows an attacker with control over the virtual NIC to repeatedly trigger interface resets to cause small amounts of memory to leak. Over time, this can lead to memory exhaustion, especially in systems already resource-constrained or under heavy load, resulting in a possible denial
Debian
CVE-2022-48905: linux - In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fr...
vendor_debian·2022·CVSS 5.5
CVE-2022-48905 [MEDIUM] CVE-2022-48905: linux - In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fr...
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing the reset work queue.
Scope: local
bookworm: resolved (fixed in 5.16.14-1)
bullseye: resolved (fixed in 5.10.106-1)
forky: resolved (fixed in 5.16.14-1)
sid: resolved (fixed in 5.16.14-1)
trixie: resolved (fixed in 5.16.14-1)
OSV
CVE-2022-48905: In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing t
osv·2024-08-22·CVSS 5.5
CVE-2022-48905 [MEDIUM] CVE-2022-48905: In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing t
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing the reset work queue.
GHSA
GHSA-wh8g-pfmc-586j: In the Linux kernel, the following vulnerability has been resolved:
ibmvnic: free reset-work-item when flushing
Fix a tiny memory leak when flushing
ghsa_unreviewed·2024-08-22
CVE-2022-48905 [MEDIUM] CWE-401 GHSA-wh8g-pfmc-586j: In the Linux kernel, the following vulnerability has been resolved:
ibmvnic: free reset-work-item when flushing
Fix a tiny memory leak when flushing
In the Linux kernel, the following vulnerability has been resolved:
ibmvnic: free reset-work-item when flushing
Fix a tiny memory leak when flushing the reset work queue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/39738a2346b270e8f72f88d8856de2c167bd2899https://git.kernel.org/stable/c/4c26745e4576cec224092e6cc12e37829333b183https://git.kernel.org/stable/c/58b07100c20e95c78b8cb4d6d28ca53eb9ef81f2https://git.kernel.org/stable/c/6acbc8875282d3ca8a73fa93cd7a9b166de5019chttps://git.kernel.org/stable/c/786576c03b313a9ff6585458aa0dfd039d897f51https://git.kernel.org/stable/c/8d0657f39f487d904fca713e0bc39c2707382553
2024-08-22
Published