CVE-2022-48955

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: thunderbolt: fix memory leak in tbnet_open()

When tb_ring_alloc_rx() failed in tbnet_open(), ida that allocated in tb_xdomain_alloc_out_hopid() is not released. Add tb_xdomain_release_out_hopid() to the error path to release ida.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux180b0689425c6fb2b35e69a3316ee38371a782df < b9274dbe399952a8175db2e1ee148b7c9ba2b538affected
LinuxLinux180b0689425c6fb2b35e69a3316ee38371a782df < ed6e955f3b7e0e622c080f4bcb5427a5e1af4c2aaffected
LinuxLinux180b0689425c6fb2b35e69a3316ee38371a782df < ed14e5903638f6eb868e3e2b4e610985e6a6c876affected
LinuxLinux5.13affected
LinuxLinux0 < 5.13unaffected
LinuxLinux5.15.83 <= 5.15.*unaffected
LinuxLinux6.0.13 <= 6.0.*unaffected
LinuxLinux6.1 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References