CVE-2022-48698

Katalog CVE

CVSS 5.3 · Medium EPSS 0,21%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.3 (Medium) menurut CISA ADP.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix memory leak when using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. Fix this up by properly calling dput().

Rincian

Terbit di NVD

3 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3a6279d243cb035eaaff1450980b40cf19748f05 patch
• https://git.kernel.org/stable/c/58acd2ebae034db3bacf38708f508fbd12ae2e54 patch
• https://git.kernel.org/stable/c/cbfac7fa491651c57926c99edeb7495c6c1aeac2 patch