5.5

CVE-2022-48669

powerpc/pseries: Fix potential memleak in papr_get_attr()

In the Linux kernel, the following vulnerability has been resolved:

powerpc/pseries: Fix potential memleak in papr_get_attr()

`buf` is allocated in papr_get_attr(), and krealloc() of `buf`
could fail. We need to free the original `buf` in the case of failure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.18 < 6.1.83
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.23
Linux ≫ Linux Kernel Version >= 6.7 < 6.7.11
Linux ≫ Linux Kernel Version >= 6.8 < 6.8.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.187
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/1699fb915b9f61794d559b55114c09a390aaf234
Patch
https://git.kernel.org/stable/c/7f7d39fe3d80d6143404940b2413010cf6527029
Patch
https://git.kernel.org/stable/c/a3f22feb2220a945d1c3282e34199e8bcdc5afc4
Patch
https://git.kernel.org/stable/c/cda9c0d556283e2d4adaa9960b2dc19b16156bae
Patch
https://git.kernel.org/stable/c/d0647c3e81eff62b66d46fd4e475318cb8cb3610
Patch