CVE-2022-48669

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-48669
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48669.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-48669
Downstream
Related
Published
2024-05-01T13:03:55Z
Modified
2025-10-21T08:32:20.104198Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
powerpc/pseries: Fix potential memleak in papr_get_attr()
Details

In the Linux kernel, the following vulnerability has been resolved:

powerpc/pseries: Fix potential memleak in paprgetattr()

buf is allocated in paprgetattr(), and krealloc() of buf could fail. We need to free the original buf in the case of failure.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3c14b73454cf9f6e2146443fdfbdfb912c0efed3
Fixed
a3f22feb2220a945d1c3282e34199e8bcdc5afc4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3c14b73454cf9f6e2146443fdfbdfb912c0efed3
Fixed
1699fb915b9f61794d559b55114c09a390aaf234
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3c14b73454cf9f6e2146443fdfbdfb912c0efed3
Fixed
7f7d39fe3d80d6143404940b2413010cf6527029
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3c14b73454cf9f6e2146443fdfbdfb912c0efed3
Fixed
d0647c3e81eff62b66d46fd4e475318cb8cb3610
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3c14b73454cf9f6e2146443fdfbdfb912c0efed3
Fixed
cda9c0d556283e2d4adaa9960b2dc19b16156bae

Affected versions

v5.*

v5.17
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.10
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3f22feb2220a945d1c3282e34199e8bcdc5afc4",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "papr_get_attr",
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-30adcaf3",
        "signature_type": "Function",
        "digest": {
            "length": 1002.0,
            "function_hash": "211158042593872978883898335081614729427"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d0647c3e81eff62b66d46fd4e475318cb8cb3610",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-6af9eb77",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "298153506858706440359075718712279883545",
                "262148549684920277831992400093721244503",
                "174341471806385187264313912700529158048",
                "155715622527247674292025157906235923759",
                "32837600125634052911320929528963941922",
                "192672743350148487966188796334210734579",
                "228628641680125881006910039648594157172"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f7d39fe3d80d6143404940b2413010cf6527029",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-92978b24",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "298153506858706440359075718712279883545",
                "262148549684920277831992400093721244503",
                "174341471806385187264313912700529158048",
                "155715622527247674292025157906235923759",
                "32837600125634052911320929528963941922",
                "192672743350148487966188796334210734579",
                "228628641680125881006910039648594157172"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f7d39fe3d80d6143404940b2413010cf6527029",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "papr_get_attr",
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-9b87a0af",
        "signature_type": "Function",
        "digest": {
            "length": 1002.0,
            "function_hash": "211158042593872978883898335081614729427"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d0647c3e81eff62b66d46fd4e475318cb8cb3610",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "papr_get_attr",
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-a48a82f2",
        "signature_type": "Function",
        "digest": {
            "length": 1002.0,
            "function_hash": "211158042593872978883898335081614729427"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cda9c0d556283e2d4adaa9960b2dc19b16156bae",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-b89f450d",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "298153506858706440359075718712279883545",
                "262148549684920277831992400093721244503",
                "174341471806385187264313912700529158048",
                "155715622527247674292025157906235923759",
                "32837600125634052911320929528963941922",
                "192672743350148487966188796334210734579",
                "228628641680125881006910039648594157172"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3f22feb2220a945d1c3282e34199e8bcdc5afc4",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-bcc8f42e",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "298153506858706440359075718712279883545",
                "262148549684920277831992400093721244503",
                "174341471806385187264313912700529158048",
                "155715622527247674292025157906235923759",
                "32837600125634052911320929528963941922",
                "192672743350148487966188796334210734579",
                "228628641680125881006910039648594157172"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1699fb915b9f61794d559b55114c09a390aaf234",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "papr_get_attr",
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-c3bf62c9",
        "signature_type": "Function",
        "digest": {
            "length": 1002.0,
            "function_hash": "211158042593872978883898335081614729427"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cda9c0d556283e2d4adaa9960b2dc19b16156bae",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "papr_get_attr",
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-e7d6c154",
        "signature_type": "Function",
        "digest": {
            "length": 1002.0,
            "function_hash": "211158042593872978883898335081614729427"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1699fb915b9f61794d559b55114c09a390aaf234",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
        },
        "id": "CVE-2022-48669-ed8d2ab7",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "298153506858706440359075718712279883545",
                "262148549684920277831992400093721244503",
                "174341471806385187264313912700529158048",
                "155715622527247674292025157906235923759",
                "32837600125634052911320929528963941922",
                "192672743350148487966188796334210734579",
                "228628641680125881006910039648594157172"
            ]
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.83
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.23
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.11
Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.2