CVE-2022-48775

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj

kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()：

If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object.

Fix memory leak by calling kobject_put().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c, < 417947891bd5ae327f15efed1a0da2b12ef24962; >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c, < fe595759c2a4a5bb41c438474f15947d8ae32f5c; >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c, < 91d8866ca55232d21995a3d54fac96de33c9e20c; >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c, < c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9; >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c, < 92e25b637cd4e010f776c86e4810300e773eac5c; >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c, < 8bc69f86328e87a0ffa79438430cc82f3aa6a194
LinuxLinux4.15

References

Timeline

Published
Jul 16, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-487765.5In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doeCVE-2022-487775.5In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the eventCVE-2022-487787.8In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpmi_nfc_CVE-2022-487797.8In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlanCVE-2022-48785.3A vulnerability classified as critical has been found in JATOS. Affected is the function ZipUtil of the file modules/common/app/utils/commonCVE-2022-487805.5In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions ThCVE-2022-487815.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - get rid of alg_memory_allocated alg_memory_allocated CVE-2022-487827.8In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem roCVE-2022-487837.8In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_pCVE-2022-487844.7In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous CVE-2022-487855.5In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Some time ago 8CVE-2022-487865.5In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by
CVE-2022-48775: Medium severity, CVSS 5.5 | Vulnix