CVE-2022-48924
published 2024-08-22CVE-2022-48924: In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below memory…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
11.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
thermal: int340x: fix memory leak in int3400_notify()
It is easy to hit the below memory leaks in my TigerLake platform:
unreferenced object 0xffff927c8b91dbc0 (size 32):
comm "kworker/0:2", pid 112, jiffies 4294893323 (age 83.604s)
hex dump (first 32 bytes):
4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The
72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk.
backtrace:
[] __kmalloc_track_caller+0x2fe/0x4a0
[] kvasprintf+0x65/0xd0
[] kasprintf+0x4e/0x70
[] int3400_notify+0x82/0x120 [int3400_thermal]
[] acpi_ev_notify_dispatch+0x54/0x71
[] acpi_os_execute_deferred+0x17/0x30
[] process_one_work+0x21a/0x3f0
[] worker_thread+0x4a/0x3b0
[] kthread+0xfd/0x130
[] ret_from_fork+0x1f/0x30
Fix it by calling kfree() accordingly.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.12-1 (bookworm) | linux 5.16.12-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 38e44da591303d08b0d965a033e11ade284999d0 < f0ddc5184b0127038d05008e2a69f89d1e13f980 | f0ddc5184b0127038d05008e2a69f89d1e13f980 |
| linux | linux | >= 38e44da591303d08b0d965a033e11ade284999d0 < c3fa6d1937a8d0828131a04ae2cd2c30d0668693 | c3fa6d1937a8d0828131a04ae2cd2c30d0668693 |
| linux | linux | >= 38e44da591303d08b0d965a033e11ade284999d0 < 2e798814e01827871938ff172d2b2ccf1e74b355 | 2e798814e01827871938ff172d2b2ccf1e74b355 |
| linux | linux | >= 38e44da591303d08b0d965a033e11ade284999d0 < e098933866f9e1dd3ef4eebbe2e3d504f970f599 | e098933866f9e1dd3ef4eebbe2e3d504f970f599 |
| linux | linux | >= 38e44da591303d08b0d965a033e11ade284999d0 < ba9efbbf6745750d34c1e87c9539ce9db645ca0a | ba9efbbf6745750d34c1e87c9539ce9db645ca0a |
| linux | linux | >= 38e44da591303d08b0d965a033e11ade284999d0 < 33c73a4d7e7b19313a6b417152f5365016926418 | 33c73a4d7e7b19313a6b417152f5365016926418 |
| linux | linux | >= 38e44da591303d08b0d965a033e11ade284999d0 < 3abea10e6a8f0e7804ed4c124bea2d15aca977c8 | 3abea10e6a8f0e7804ed4c124bea2d15aca977c8 |
| linux | linux_kernel | >= 0 < 5.10.103-1 | 5.10.103-1 |
| linux | linux_kernel | >= 0 < 5.16.12-1 | 5.16.12-1 |
| linux | linux_kernel | >= 0 < 5.16.12-1 | 5.16.12-1 |
| linux | linux_kernel | >= 0 < 5.16.12-1 | 5.16.12-1 |
| linux | linux_kernel | >= 4.14 < 4.14.274 | 4.14.274 |
| linux | linux_kernel | >= 4.15 < 4.19.237 | 4.19.237 |
| linux | linux_kernel | >= 4.20 < 5.4.188 | 5.4.188 |
| linux | linux_kernel | >= 5.11 < 5.15.26 | 5.15.26 |
| linux | linux_kernel | >= 5.16 < 5.16.12 | 5.16.12 |
| linux | linux_kernel | >= 5.5 < 5.10.103 | 5.10.103 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-48924: In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below
osv·2024-08-22·CVSS 5.5
CVE-2022-48924 [MEDIUM] CVE-2022-48924: In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below
In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below memory leaks in my TigerLake platform: unreferenced object 0xffff927c8b91dbc0 (size 32): comm "kworker/0:2", pid 112, jiffies 4294893323 (age 83.604s) hex dump (first 32 bytes): 4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The 72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk. backtrace: [] __kmalloc_track_caller+0x2fe/0x4a0 [] kvasprintf+0x65/0xd0 [] kasprintf+0x4e/0x70 [] int3400_notify+0x82/0x120 [int3400_thermal] [] acpi_ev_notify_dispatch+0x54/0x71 [] acpi_os_execute_deferred+0x17/0x30 [] process_one_work+0x21a/0x3f0 [] worker_thread+0x4a/0x3b0 [] kthread+0xfd/0x130 [] ret_from_fork+0x1f/0x30 Fix it by calli
GHSA
GHSA-vm7f-w6gx-mxh8: In the Linux kernel, the following vulnerability has been resolved:
thermal: int340x: fix memory leak in int3400_notify()
It is easy to hit the belo
ghsa_unreviewed·2024-08-22
CVE-2022-48924 [MEDIUM] CWE-401 GHSA-vm7f-w6gx-mxh8: In the Linux kernel, the following vulnerability has been resolved:
thermal: int340x: fix memory leak in int3400_notify()
It is easy to hit the belo
In the Linux kernel, the following vulnerability has been resolved:
thermal: int340x: fix memory leak in int3400_notify()
It is easy to hit the below memory leaks in my TigerLake platform:
unreferenced object 0xffff927c8b91dbc0 (size 32):
comm "kworker/0:2", pid 112, jiffies 4294893323 (age 83.604s)
hex dump (first 32 bytes):
4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The
72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk.
backtrace:
[] __kmalloc_track_caller+0x2fe/0x4a0
[] kvasprintf+0x65/0xd0
[] kasprintf+0x4e/0x70
[] int3400_notify+0x82/0x120 [int3400_thermal]
[] acpi_ev_notify_dispatch+0x54/0x71
[] acpi_os_execute_deferred+0x17/0x30
[] process_one_work+0x21a/0x3f0
[] worker_thread+0x4a/0x3b0
[] kthread+0xfd/0x130
[] ret_from_fork+0x1f/0x30
Fix it by c
Red Hat
kernel: thermal: int340x: fix memory leak in int3400_notify()
vendor_redhat·2024-08-22·CVSS 5.5
CVE-2022-48924 [MEDIUM] CWE-401 kernel: thermal: int340x: fix memory leak in int3400_notify()
kernel: thermal: int340x: fix memory leak in int3400_notify()
In the Linux kernel, the following vulnerability has been resolved:
thermal: int340x: fix memory leak in int3400_notify()
It is easy to hit the below memory leaks in my TigerLake platform:
unreferenced object 0xffff927c8b91dbc0 (size 32):
comm "kworker/0:2", pid 112, jiffies 4294893323 (age 83.604s)
hex dump (first 32 bytes):
4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The
72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk.
backtrace:
[] __kmalloc_track_caller+0x2fe/0x4a0
[] kvasprintf+0x65/0xd0
[] kasprintf+0x4e/0x70
[] int3400_notify+0x82/0x120 [int3400_thermal]
[] acpi_ev_notify_dispatch+0x54/0x71
[] acpi_os_execute_deferred+0x17/0x30
[] process_one_work+0x21a/0x3f0
[] worker_thread+0x4a/0x3b0
[
Debian
CVE-2022-48924: linux - In the Linux kernel, the following vulnerability has been resolved: thermal: in...
vendor_debian·2022·CVSS 5.5
CVE-2022-48924 [MEDIUM] CVE-2022-48924: linux - In the Linux kernel, the following vulnerability has been resolved: thermal: in...
In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below memory leaks in my TigerLake platform: unreferenced object 0xffff927c8b91dbc0 (size 32): comm "kworker/0:2", pid 112, jiffies 4294893323 (age 83.604s) hex dump (first 32 bytes): 4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The 72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk. backtrace: [] __kmalloc_track_caller+0x2fe/0x4a0 [] kvasprintf+0x65/0xd0 [] kasprintf+0x4e/0x70 [] int3400_notify+0x82/0x120 [int3400_thermal] [] acpi_ev_notify_dispatch+0x54/0x71 [] acpi_os_execute_deferred+0x17/0x30 [] process_one_work+0x21a/0x3f0 [] worker_thread+0x4a/0x3b0 [] kthread+0xfd/0x130 [] ret_from_fork+0x1f/0x30 Fix it by calli
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/2e798814e01827871938ff172d2b2ccf1e74b355https://git.kernel.org/stable/c/33c73a4d7e7b19313a6b417152f5365016926418https://git.kernel.org/stable/c/3abea10e6a8f0e7804ed4c124bea2d15aca977c8https://git.kernel.org/stable/c/ba9efbbf6745750d34c1e87c9539ce9db645ca0ahttps://git.kernel.org/stable/c/c3fa6d1937a8d0828131a04ae2cd2c30d0668693https://git.kernel.org/stable/c/e098933866f9e1dd3ef4eebbe2e3d504f970f599https://git.kernel.org/stable/c/f0ddc5184b0127038d05008e2a69f89d1e13f980
2024-08-22
Published