Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48863

mISDN: Fix memory leak in dsp_pipeline_build()

Description

In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsp_pipeline_build() dsp_pipeline_build() allocates dup pointer by kstrdup(cfg), but then it updates dup variable by strsep(&dup, "|"). As a result when it calls kfree(dup), the dup variable contains NULL. Found by Linux Driver Verification project (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 960366cf8dbb3359afaca30cf7fdbf69a6d6dda7 to < a3d5fcc6cf2ecbba5a269631092570aa285a24cbaffected
  • 960366cf8dbb3359afaca30cf7fdbf69a6d6dda7 to < 7777b1f795af1bb43867375d8a776080111aae1baffected
  • 960366cf8dbb3359afaca30cf7fdbf69a6d6dda7 to < 640445d6fc059d4514ffea79eb4196299e0e2d0faffected
  • 960366cf8dbb3359afaca30cf7fdbf69a6d6dda7 to < c6a502c2299941c8326d029cfc8a3bc8a4607ad5affected

Linux Linux

Default version status: affected

  • 2.6.27affected
  • 0 to < 2.6.27unaffected
  • 5.10.106 to ≤ 5.10.*unaffected
  • 5.15.29 to ≤ 5.15.*unaffected
  • 5.16.15 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References