5.5
CVE-2022-48880
- EPSS 0.24%
- Veröffentlicht 21.08.2024 07:15:04
- Zuletzt bearbeitet 10.10.2025 13:48:53
- CVE-Watchlists
- Unerledigt
platform/surface: aggregator: Add missing call to ssam_request_sync_free()
In the Linux kernel, the following vulnerability has been resolved: platform/surface: aggregator: Add missing call to ssam_request_sync_free() Although rare, ssam_request_sync_init() can fail. In that case, the request should be freed via ssam_request_sync_free(). Currently it is leaked instead. Fix this.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.12 < 5.15.89
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.7
Linux ≫ Linux Kernel Version6.2 Updaterc1
Linux ≫ Linux Kernel Version6.2 Updaterc2
Linux ≫ Linux Kernel Version6.2 Updaterc3
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.146 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
https://git.kernel.org/stable/c/50b3cdf8239b11545f311c4f7b89e0092e4feedb
https://git.kernel.org/stable/c/c965daac370f08a9b71d573a71d13cda76f2a884
https://git.kernel.org/stable/c/d2dc110deabe7142b60ebeed689e67f92795ee24