First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-48959

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()

When dsa_devlink_region_create failed in sja1105_setup_devlink_regions(), priv->regions is not released.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= bf425b82059e0b0752c0026353c1902112200837, < 4be43e46c3f945fc7dd9e23c73a7a66927a3b814; >= bf425b82059e0b0752c0026353c1902112200837, < f3b5dda26cd0535aac09ed09c5d83f19b979ec9f; >= bf425b82059e0b0752c0026353c1902112200837, < e5e59629654b8826f0167dae480d0e3fa0f8f038; >= bf425b82059e0b0752c0026353c1902112200837, < 78a9ea43fc1a7c06a420b132d2d47cbf4344a5df
Linux	Linux	5.10

References

Timeline

Published: Oct 21, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-48967.5Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNT CVE-2022-489607.8In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() The skb i CVE-2022-489615.5In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix unbalanced fwnode reference count in mdio_device_release CVE-2022-489627.8In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The sk CVE-2022-489635.5In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipc_mux_init() When failed to allo CVE-2022-489647.8In the Linux kernel, the following vulnerability has been resolved: ravb: Fix potential use-after-free in ravb_rx_gbeth() The skb is deliv CVE-2022-489655.5In the Linux kernel, the following vulnerability has been resolved: gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() The no CVE-2022-489667.1In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp-CVE-2022-489677.1In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CO CVE-2022-489685.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential memory leak in otx2_init_tc() In otx2_init CVE-2022-489695.5In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Fix NULL sring after live migration A NAPI is setup for CVE-2022-48976.1The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, le

CVE-2022-48959: Medium severity, CVSS 5.5 | Vulnix