Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-48753
HistoryJun 20, 2024 - 12:00 a.m.

CVE-2022-48753

2024-06-2000:00:00
ubuntu.com
ubuntu.com
1
linux kernel
memory leak
vulnerability
disk_register_independent_access_ranges
kobject_put

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In the Linux kernel, the following vulnerability has been resolved:
block: fix memory leak in disk_register_independent_access_ranges
kobject_init_and_add() takes reference even when it fails.
According to the doc of kobject_init_and_add()
If this function returns an error, kobject_put() must be called to
properly clean up the memory associated with the object.
Fix this issue by adding kobject_put().
Callback function blk_ia_ranges_sysfs_release() in kobject_put()
can handle the pointer “iars” properly.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%