In the Linux kernel, the following vulnerability has been resolved:
mISDN: Fix memory leak in dsppipelinebuild()
dsppipelinebuild() allocates dup pointer by kstrdup(cfg), but then it updates dup variable by strsep(&dup, "|"). As a result when it calls kfree(dup), the dup variable contains NULL.
Found by Linux Driver Verification project (linuxtesting.org) with SVACE.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3d5fcc6cf2ecbba5a269631092570aa285a24cb",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48863-096d3724",
"target": {
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"296879416033862407978665884924069639944",
"31100363822765093866712552050197777019",
"183655624939803943991923167197873590736",
"305963996203664543434676241433377649681",
"189228452097163188347078428725418895648",
"283422280220103521908032299006668304937",
"131487280980922698795063053228295710268",
"166888725251063390775772054466207852716",
"74593600084055770587048626550091440201",
"264180081354333703317343091065077338103",
"227070616084647441062170577508896928381"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@640445d6fc059d4514ffea79eb4196299e0e2d0f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48863-1ba4798f",
"target": {
"function": "dsp_pipeline_build",
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"signature_type": "Function",
"digest": {
"length": 1556.0,
"function_hash": "107179864194412575015473336847473989386"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7777b1f795af1bb43867375d8a776080111aae1b",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48863-49c6e553",
"target": {
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"296879416033862407978665884924069639944",
"31100363822765093866712552050197777019",
"183655624939803943991923167197873590736",
"305963996203664543434676241433377649681",
"189228452097163188347078428725418895648",
"283422280220103521908032299006668304937",
"131487280980922698795063053228295710268",
"166888725251063390775772054466207852716",
"74593600084055770587048626550091440201",
"264180081354333703317343091065077338103",
"227070616084647441062170577508896928381"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6a502c2299941c8326d029cfc8a3bc8a4607ad5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48863-4c4bb4ff",
"target": {
"function": "dsp_pipeline_build",
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"signature_type": "Function",
"digest": {
"length": 1556.0,
"function_hash": "107179864194412575015473336847473989386"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3d5fcc6cf2ecbba5a269631092570aa285a24cb",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48863-a0fbbf69",
"target": {
"function": "dsp_pipeline_build",
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"signature_type": "Function",
"digest": {
"length": 1556.0,
"function_hash": "107179864194412575015473336847473989386"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@640445d6fc059d4514ffea79eb4196299e0e2d0f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48863-c22d354e",
"target": {
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"296879416033862407978665884924069639944",
"31100363822765093866712552050197777019",
"183655624939803943991923167197873590736",
"305963996203664543434676241433377649681",
"189228452097163188347078428725418895648",
"283422280220103521908032299006668304937",
"131487280980922698795063053228295710268",
"166888725251063390775772054466207852716",
"74593600084055770587048626550091440201",
"264180081354333703317343091065077338103",
"227070616084647441062170577508896928381"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6a502c2299941c8326d029cfc8a3bc8a4607ad5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48863-d160509b",
"target": {
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"296879416033862407978665884924069639944",
"31100363822765093866712552050197777019",
"183655624939803943991923167197873590736",
"305963996203664543434676241433377649681",
"189228452097163188347078428725418895648",
"283422280220103521908032299006668304937",
"131487280980922698795063053228295710268",
"166888725251063390775772054466207852716",
"74593600084055770587048626550091440201",
"264180081354333703317343091065077338103",
"227070616084647441062170577508896928381"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7777b1f795af1bb43867375d8a776080111aae1b",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48863-fc91bd96",
"target": {
"function": "dsp_pipeline_build",
"file": "drivers/isdn/mISDN/dsp_pipeline.c"
},
"signature_type": "Function",
"digest": {
"length": 1556.0,
"function_hash": "107179864194412575015473336847473989386"
}
}
]