Riskcovery

CVE-2022-48831

ima: fix reference leak in asymmetric_verify()

State
Published
Severity
Not scored
Published
Jul 16, 2024
Updated
May 11, 2026
Reserved
Jul 16, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ima: fix reference leak in asymmetric_verify()

Don't leak a reference to the key if its algorithm is unknown.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 947d70597236dd5ae65c1f68c8eabfb962ee5a6b to before 0838d6d68182f0b28a5434bc6d50727c4757e35bAffected
  • 947d70597236dd5ae65c1f68c8eabfb962ee5a6b to before 89f586d3398f4cc0432ed870949dffb702940754Affected
  • 947d70597236dd5ae65c1f68c8eabfb962ee5a6b to before 926fd9f23b27ca6587492c3f58f4c7f4cd01dad5Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.24 through 5.15.*Not affected
  • 5.16.10 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.