CVE-2022-48768

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing/histogram: Fix a potential memory leak for kstrdup()

kfree() is missing on an error path to free the memory allocated by kstrdup():

p = param = kstrdup(data->params[i], GFP_KERNEL);

So it is better to free it via kfree(p).

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 38b67e60b6b582e81f9db1b2e7176cbbfbd3e574, < 8a8878ebb596281f50fc0b9a6e1f23f0d7f154e8; >= d380dcde9a07ca5de4805dee11f58a98ec0ad6ff, < d71b06aa995007eafd247626d0669b9364c42ad7; >= d380dcde9a07ca5de4805dee11f58a98ec0ad6ff, < e33fa4a46ee22de88a700e2e3d033da8214a5175; >= d380dcde9a07ca5de4805dee11f58a98ec0ad6ff, < df86e2fe808c3536a9dba353cc2bebdfea00d0cf; >= d380dcde9a07ca5de4805dee11f58a98ec0ad6ff, < e629e7b525a179e29d53463d992bdee759c950fb; c78a2baf5e1fe1b38121d6b54bab77ccb81a1a86; >= 5.4.19, < 5.4.176; >= 5.5.6, < 5.6
LinuxLinux5.6

References

Timeline

Published
Jun 20, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-487695.5In the Linux kernel, the following vulnerability has been resolved: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines AdityCVE-2022-48776.1A vulnerability has been found in snoyberg keter up to 1.8.1 and classified as problematic. This vulnerability affects unknown code of the fCVE-2022-487705.5In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() taskCVE-2022-487717.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix stale file descriptors on failed usercopy A failing usCVE-2022-487725.5In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-def The driver shouCVE-2022-487735.5In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create If thCVE-2022-487745.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: Fix the error handling path in pt_core_init() In ordCVE-2022-487755.5In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_CVE-2022-487765.5In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doeCVE-2022-487775.5In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the eventCVE-2022-487787.8In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpmi_nfc_CVE-2022-487797.8In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan
CVE-2022-48768: Medium severity, CVSS 5.5 | Vulnix