CVE-2022-48776

Summary

In the Linux kernel, the following vulnerability has been resolved:

mtd: parsers: qcom: Fix missing free for pparts in cleanup

Mtdpart doesn't free pparts when a cleanup function is declared. Add missing free for pparts in cleanup function for smem to fix the leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux10f3b4d79958d6f9f71588c6fa862159c83fa80f < 3eb5185896a68373714dc7d0009111744adc3345affected
LinuxLinux10f3b4d79958d6f9f71588c6fa862159c83fa80f < 1b37889f9a151d26a3fb0d3870f6e1046dee2e24affected
LinuxLinux10f3b4d79958d6f9f71588c6fa862159c83fa80f < 3dd8ba961b9356c4113b96541c752c73d98fef70affected
LinuxLinuxaf86e36c583300e10a52e3b3348c88a69fc0c552affected
LinuxLinux765beb5ef9da4fecb50210decd55dd24187a0698affected
LinuxLinux5.12.17 < 5.13affected
LinuxLinux5.13.2 < 5.14affected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux5.15.25 <= 5.15.*unaffected
LinuxLinux5.16.11 <= 5.16.*unaffected
LinuxLinux5.17 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References