Bug 2298207 (CVE-2022-48863) - CVE-2022-48863 kernel: mISDN: Fix memory leak in dsp_pipeline_build()
Summary: CVE-2022-48863 kernel: mISDN: Fix memory leak in dsp_pipeline_build()
Keywords:
Status: NEW
Alias: CVE-2022-48863
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-07-16 13:34 UTC by OSIDB Bzimport
Modified: 2024-09-23 15:34 UTC (History)
4 users (show)

Fixed In Version: kernel 5.10.106, kernel 5.15.29, kernel 5.16.15, kernel 5.17
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-07-16 13:34:24 UTC 
In the Linux kernel, the following vulnerability has been resolved:

mISDN: Fix memory leak in dsp_pipeline_build()

dsp_pipeline_build() allocates dup pointer by kstrdup(cfg),
but then it updates dup variable by strsep(&dup, "|").
As a result when it calls kfree(dup), the dup variable contains NULL.

Found by Linux Driver Verification project (linuxtesting.org) with SVACE.
Note You need to log in before you can comment on or make changes to this bug.