CVE-2022-48957

Summary

In the Linux kernel, the following vulnerability has been resolved:

dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()

The cmd_buff needs to be freed when error happened in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1110318d83e8011c4dfcb2f7dd343bcfb1623c5f < 54d830e24247fa8361b016dd2069362866f45cb6affected
LinuxLinux1110318d83e8011c4dfcb2f7dd343bcfb1623c5f < 785ee7a82297e1512d9061aae91699212ed65796affected
LinuxLinux1110318d83e8011c4dfcb2f7dd343bcfb1623c5f < 4fad22a1281c500f15b172c9d261eff347ca634baffected
LinuxLinux5.13affected
LinuxLinux0 < 5.13unaffected
LinuxLinux5.15.83 <= 5.15.*unaffected
LinuxLinux6.0.13 <= 6.0.*unaffected
LinuxLinux6.1 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References