CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
Published Oct 21, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: sja1105: fix memory leak in sja1105setupdevlinkregions()
When dsadevlinkregioncreate failed in sja1105setupdevlinkregions(), priv->regions is not released.
Affected Software
11 affected components
Linux Linux kernel>=5.10<5.10.159
Linux Linux kernel>=5.11<5.15.83
Linux Linux kernel>=5.16<6.0.13
Linux Linux kernel=6.1-rc1
Linux Linux kernel=6.1-rc2
Linux Linux kernel=6.1-rc3
Linux Linux kernel=6.1-rc4
Linux Linux kernel=6.1-rc5
Linux Linux kernel=6.1-rc6
Linux Linux kernel=6.1-rc7
Linux Linux kernel=6.1-rc8
Remediation
Event History
Oct 21, 2024
CVE Published
via MITRE·08:05 PM
Data Sourced
via MITRE·08:05 PM
Description
Data Sourced
via NVD·08:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-48959?
CVE-2022-48959 has a medium severity due to memory leaks in the Linux kernel.
2
What versions are affected by CVE-2022-48959?
CVE-2022-48959 affects Linux kernel versions between 5.10 and 6.1-rc8.
3
How do I fix CVE-2022-48959?
To fix CVE-2022-48959, you should upgrade to a patched version of the Linux kernel.
4
What vulnerabilities does CVE-2022-48959 address?
CVE-2022-48959 addresses a memory leak vulnerability in the sja1105 driver within the Linux kernel.
5
Is there a workaround for CVE-2022-48959?
Currently, there are no documented workarounds for CVE-2022-48959 other than applying the appropriate kernel updates.