Lucene search

LinuxVULNRICHMENT:CVE-2022-48768

HistoryJun 20, 2024 - 11:13 a.m.

CVE-2022-48768 tracing/histogram: Fix a potential memory leak for kstrdup()

2024-06-2011:13:43

Linux

github.com

linux kernel

memory leak

tracing

kstrdup

kfree

potential vulnerability

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

tracing/histogram: Fix a potential memory leak for kstrdup()

kfree() is missing on an error path to free the memory allocated by
kstrdup():

p = param = kstrdup(data->params[i], GFP_KERNEL);

So it is better to free it via kfree(p).

References

git.kernel.org/stable/c/8a8878ebb596281f50fc0b9a6e1f23f0d7f154e8

git.kernel.org/stable/c/d71b06aa995007eafd247626d0669b9364c42ad7

git.kernel.org/stable/c/df86e2fe808c3536a9dba353cc2bebdfea00d0cf

git.kernel.org/stable/c/e33fa4a46ee22de88a700e2e3d033da8214a5175

git.kernel.org/stable/c/e629e7b525a179e29d53463d992bdee759c950fb