CVE-2022-48856

2024-07-1613:15:12

CWE-401

Linux

web.nvd.nist.gov

linux kernel

gianfar

ethtool

refcount leak

fix

vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

gianfar: ethtool: Fix refcount leak in gfar_get_ts_info

The of_find_compatible_node() function returns a node pointer with
refcount incremented, We should use of_node_put() on it when done
Add the missing of_node_put() to release the refcount.

Affected configurations

Nvd

Vulners

Node

linuxlinux_kernelRange4.18–4.19.235

linuxlinux_kernelRange4.20–5.4.185

linuxlinux_kernelRange5.5–5.10.106

linuxlinux_kernelRange5.11–5.15.29

linuxlinux_kernelRange5.16–5.16.15

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/freescale/gianfar_ethtool.c"
    ],
    "versions": [
      {
        "version": "7349a74ea75c",
        "lessThan": "6263f2eb93a8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7349a74ea75c",
        "lessThan": "f7b3b5203491",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7349a74ea75c",
        "lessThan": "21044e679ed5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7349a74ea75c",
        "lessThan": "f49f646f9ec2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7349a74ea75c",
        "lessThan": "0e1b9a2078e0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7349a74ea75c",
        "lessThan": "2ac5b58e645c",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/freescale/gianfar_ethtool.c"
    ],
    "versions": [
      {
        "version": "4.18",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.18",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.235",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.185",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.106",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.29",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.16.15",
        "lessThanOrEqual": "5.16.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.17",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]