Riskcovery

CVE-2022-48863

mISDN: Fix memory leak in dsp_pipeline_build()

State
Published
Severity
Not scored
Published
Jul 16, 2024
Updated
May 11, 2026
Reserved
Jul 16, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mISDN: Fix memory leak in dsp_pipeline_build()

dsp_pipeline_build() allocates dup pointer by kstrdup(cfg), but then it updates dup variable by strsep(&dup, "|"). As a result when it calls kfree(dup), the dup variable contains NULL.

Found by Linux Driver Verification project (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 960366cf8dbb3359afaca30cf7fdbf69a6d6dda7 to before a3d5fcc6cf2ecbba5a269631092570aa285a24cbAffected
  • 960366cf8dbb3359afaca30cf7fdbf69a6d6dda7 to before 7777b1f795af1bb43867375d8a776080111aae1bAffected
  • 960366cf8dbb3359afaca30cf7fdbf69a6d6dda7 to before 640445d6fc059d4514ffea79eb4196299e0e2d0fAffected
  • 960366cf8dbb3359afaca30cf7fdbf69a6d6dda7 to before c6a502c2299941c8326d029cfc8a3bc8a4607ad5Affected
LinuxLinux
  • 2.6.27Affected
  • before 2.6.27Not affected
  • 5.10.106 through 5.10.*Not affected
  • 5.15.29 through 5.15.*Not affected
  • 5.16.15 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.