CVE-2022-48863

Source
https://cve.org/CVERecord?id=CVE-2022-48863
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48863.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-48863
Downstream
Related
Published
2024-07-16T12:25:26.482Z
Modified
2026-03-14T12:00:42.293122Z
Summary
mISDN: Fix memory leak in dsp_pipeline_build()
Details

In the Linux kernel, the following vulnerability has been resolved:

mISDN: Fix memory leak in dsppipelinebuild()

dsppipelinebuild() allocates dup pointer by kstrdup(cfg), but then it updates dup variable by strsep(&dup, "|"). As a result when it calls kfree(dup), the dup variable contains NULL.

Found by Linux Driver Verification project (linuxtesting.org) with SVACE.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48863.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
960366cf8dbb3359afaca30cf7fdbf69a6d6dda7
Fixed
a3d5fcc6cf2ecbba5a269631092570aa285a24cb
Fixed
7777b1f795af1bb43867375d8a776080111aae1b
Fixed
640445d6fc059d4514ffea79eb4196299e0e2d0f
Fixed
c6a502c2299941c8326d029cfc8a3bc8a4607ad5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48863.json"