CVE-2022-48955: net: thunderbolt: fix memory leak in tbnet_open()
In the Linux kernel, the following vulnerability has been resolved:
net: thunderbolt: fix memory leak in tbnetopen()
When tbringallocrx() failed in tbnetopen(), ida that allocated in tbxdomainallocouthopid() is not released. Add tbxdomainreleaseouthopid() to the error path to release ida.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48955?
CVE-2022-48955 has been categorized with a medium severity due to the potential for memory leaks in affected Linux kernel versions.
How do I fix CVE-2022-48955?
To remediate CVE-2022-48955, update the Linux kernel to a version that includes the fix for the vulnerability.
Which versions of the Linux kernel are affected by CVE-2022-48955?
CVE-2022-48955 affects Linux kernel versions from 5.13 to 5.15.83 and from 5.16 to 6.1-rc8.
What specific component of the Linux kernel is impacted by CVE-2022-48955?
CVE-2022-48955 specifically affects the Thunderbolt networking component within the Linux kernel.
Is CVE-2022-48955 exploitable remotely?
CVE-2022-48955 is not directly exploitable remotely but may lead to denial of service conditions on affected systems.