Lucene search

K
cvelistLinuxCVELIST:CVE-2022-48768
HistoryJun 20, 2024 - 11:13 a.m.

CVE-2022-48768 tracing/histogram: Fix a potential memory leak for kstrdup()

2024-06-2011:13:43
Linux
www.cve.org
1
linux kernel
vulnerability
memory leak
kstrdup
kfree
cve-2022-48768

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

tracing/histogram: Fix a potential memory leak for kstrdup()

kfree() is missing on an error path to free the memory allocated by
kstrdup():

p = param = kstrdup(data->params[i], GFP_KERNEL);

So it is better to free it via kfree(p).

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "kernel/trace/trace_events_hist.c"
    ],
    "versions": [
      {
        "version": "38b67e60b6b5",
        "lessThan": "8a8878ebb596",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d380dcde9a07",
        "lessThan": "d71b06aa9950",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d380dcde9a07",
        "lessThan": "e33fa4a46ee2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d380dcde9a07",
        "lessThan": "df86e2fe808c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d380dcde9a07",
        "lessThan": "e629e7b525a1",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "kernel/trace/trace_events_hist.c"
    ],
    "versions": [
      {
        "version": "5.6",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.6",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.176",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.96",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.19",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.16.5",
        "lessThanOrEqual": "5.16.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.17",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

0.0004 Low

EPSS

Percentile

15.7%

Related for CVELIST:CVE-2022-48768