In the Linux kernel, the following vulnerability has been resolved:
block: fix memory leak in diskregisterindependentaccessranges
kobjectinitandadd() takes reference even when it fails. According to the doc of kobjectinitandadd()
If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object.
Fix this issue by adding kobjectput(). Callback function blkiarangessysfsrelease() in kobjectput() can handle the pointer "iars" properly.
[
{
"signature_version": "v1",
"id": "CVE-2022-48753-052a3bc2",
"signature_type": "Function",
"digest": {
"length": 954.0,
"function_hash": "181758607965758697903719544274964467831"
},
"target": {
"file": "block/blk-ia-ranges.c",
"function": "disk_register_independent_access_ranges"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe4214a07e0b53d2af711f57519e33739c5df23f",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-48753-7dd377b5",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"223500357834893261896815969806463569826",
"211162682401172555741986288547618741379",
"309609375633902768206859582465401232157",
"213766133375841888620214832256229091430"
]
},
"target": {
"file": "block/blk-ia-ranges.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe4214a07e0b53d2af711f57519e33739c5df23f",
"deprecated": false
}
]