CVE-2022-48860

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemaclite_of_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak. As the remove function do.

Rincian

Terbit di NVD

16 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1852854ee349881efb78ccdbbb237838975902e4 patch
• https://git.kernel.org/stable/c/5e7c402892e189a7bc152b125e72261154aa585d patch
• https://git.kernel.org/stable/c/669172ce976608b25a2f76f3c65d47f042d125c9 patch
• https://git.kernel.org/stable/c/8609e29611befc4bfbe7a91bb50fc65ae72ff549 patch
• https://git.kernel.org/stable/c/8ee065a7a9b6a3976c16340503677efc4d8351f6 patch
• https://git.kernel.org/stable/c/979b418b96e35f07136f77962ccfaa54cf3e30e1 patch
• https://git.kernel.org/stable/c/b19ab4b38b06aae12442b2de95ccf58b5dc53584 patch
• https://git.kernel.org/stable/c/b7220f8e9d6c6b9594ddfb3125dad938cd478b1f patch