Riskcovery

CVE-2022-48753

block: fix memory leak in disk_register_independent_access_ranges

State
Published
Severity
5.3 Medium
Published
Jun 20, 2024
Updated
May 11, 2026
Reserved
Jun 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

block: fix memory leak in disk_register_independent_access_ranges

kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()

If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object.

Fix this issue by adding kobject_put(). Callback function blk_ia_ranges_sysfs_release() in kobject_put() can handle the pointer "iars" properly.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a2247f19ee1c5ad75ef095cdfb909a3244b88aa8 to before fe4214a07e0b53d2af711f57519e33739c5df23fAffected
  • a2247f19ee1c5ad75ef095cdfb909a3244b88aa8 to before 83114df32ae779df57e0af99a8ba6c3968b2ba3dAffected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 5.16.5 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.