CVE-2022-48975
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-48975
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48975.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-48975
- Downstream
- Related
- Published
- 2024-10-21T20:05:55Z
- Modified
- 2025-10-21T08:57:28.635237Z
- Summary
- gpiolib: fix memory leak in gpiochip_setup_dev()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
gpiolib: fix memory leak in gpiochipsetupdev()
Here is a backtrace report about memory leak detected in gpiochipsetupdev():
unreferenced object 0xffff88810b406400 (size 512): comm "python3", pid 1682, jiffies 4295346908 (age 24.090s) backtrace: kmalloctrace deviceadd deviceprivateinit at drivers/base/core.c:3361 (inlined by) deviceadd at drivers/base/core.c:3411 cdevdeviceadd gpiolibcdevregister gpiochipsetupdev gpiochipadddatawith_key
gcdevregister() & gcdevunregister() would call deviceadd() & devicedel() (no matter CONFIGGPIOCDEV is enabled or not) to register/unregister device.
However, if deviceadd() succeeds, some resource (like struct deviceprivate allocated by deviceprivateinit()) is not released by device_del().
Therefore, after deviceadd() succeeds by gcdevregister(), it needs to call put_device() to release resource in the error handle path.
Here we move forward the register of release function, and let it release every piece of resource by put_device() instead of kfree().
While at it, fix another subtle issue, i.e. when gc->ngpio is equal to 0, we still call kcalloc() and, in case of further error, kfree() on the ZERO_PTR pointer, which is not NULL. It's not a bug per se, but rather waste of the resources and potentially wrong expectation about contents of the gdev->descs variable.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced159f3cd92f17c61a4e2a47456de5865b114ef88eFixed6daaa84b621485fe28c401be18debf92ae8ef04a
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced159f3cd92f17c61a4e2a47456de5865b114ef88eFixed371363716398ed718e389bea8c5e9843a79dde4e
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced159f3cd92f17c61a4e2a47456de5865b114ef88eFixedec851b23084b3a0af8bf0f5e51d33a8d678bdc49
Affected versions
v4.*
v4.10
v4.10-rc1
v4.10-rc2
v4.10-rc3
v4.10-rc4
v4.10-rc5
v4.10-rc6
v4.10-rc7
v4.10-rc8
v4.11
v4.11-rc1
v4.11-rc2
v4.11-rc3
v4.11-rc4
v4.11-rc5
v4.11-rc6
v4.11-rc7
v4.11-rc8
v4.12
v4.12-rc1
v4.12-rc2
v4.12-rc3
v4.12-rc4
v4.12-rc5
v4.12-rc6
v4.12-rc7
v4.13
v4.13-rc1
v4.13-rc2
v4.13-rc3
v4.13-rc4
v4.13-rc5
v4.13-rc6
v4.13-rc7
v4.14
v4.14-rc1
v4.14-rc2
v4.14-rc3
v4.14-rc4
v4.14-rc5
v4.14-rc6
v4.14-rc7
v4.14-rc8
v4.15
v4.15-rc1
v4.15-rc2
v4.15-rc3
v4.15-rc4
v4.15-rc5
v4.15-rc6
v4.15-rc7
v4.15-rc8
v4.15-rc9
v4.16
v4.16-rc1
v4.16-rc2
v4.16-rc3
v4.16-rc4
v4.16-rc5
v4.16-rc6
v4.16-rc7
v4.17
v4.17-rc1
v4.17-rc2
v4.17-rc3
v4.17-rc4
v4.17-rc5
v4.17-rc6
v4.17-rc7
v4.18
v4.18-rc1
v4.18-rc2
v4.18-rc3
v4.18-rc4
v4.18-rc5
v4.18-rc6
v4.18-rc7
v4.18-rc8
v4.19
v4.19-rc1
v4.19-rc2
v4.19-rc3
v4.19-rc4
v4.19-rc5
v4.19-rc6
v4.19-rc7
v4.19-rc8
v4.20
v4.20-rc1
v4.20-rc2
v4.20-rc3
v4.20-rc4
v4.20-rc5
v4.20-rc6
v4.20-rc7
v4.6
v4.6-rc3
v4.6-rc4
v4.6-rc5
v4.6-rc6
v4.6-rc7
v4.7
v4.7-rc1
v4.7-rc2
v4.7-rc3
v4.7-rc4
v4.7-rc5
v4.7-rc6
v4.7-rc7
v4.8
v4.8-rc1
v4.8-rc2
v4.8-rc3
v4.8-rc4
v4.8-rc5
v4.8-rc6
v4.8-rc7
v4.8-rc8
v4.9
v4.9-rc1
v4.9-rc2
v4.9-rc3
v4.9-rc4
v4.9-rc5
v4.9-rc6
v4.9-rc7
v4.9-rc8
v5.*
v5.0
v5.0-rc1
v5.0-rc2
v5.0-rc3
v5.0-rc4
v5.0-rc5
v5.0-rc6
v5.0-rc7
v5.0-rc8
v5.1
v5.1-rc1
v5.1-rc2
v5.1-rc3
v5.1-rc4
v5.1-rc5
v5.1-rc6
v5.1-rc7
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.6
v5.15.60
v5.15.61
v5.15.62
v5.15.63
v5.15.64
v5.15.65
v5.15.66
v5.15.67
v5.15.68
v5.15.69
v5.15.7
v5.15.70
v5.15.71
v5.15.72
v5.15.73
v5.15.74
v5.15.75
v5.15.76
v5.15.77
v5.15.78
v5.15.79
v5.15.8
v5.15.80
v5.15.81
v5.15.82
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.2
v5.2-rc1
v5.2-rc2
v5.2-rc3
v5.2-rc4
v5.2-rc5
v5.2-rc6
v5.2-rc7
v5.3
v5.3-rc1
v5.3-rc2
v5.3-rc3
v5.3-rc4
v5.3-rc5
v5.3-rc6
v5.3-rc7
v5.3-rc8
v5.4
v5.4-rc1
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8
v6.*
v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.8
v6.0.9
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
Database specific
vanir_signatures
[
{
"signature_type": "Function",
"digest": {
"function_hash": "103820645485410694064073421037129548298",
"length": 451.0
},
"target": {
"file": "drivers/gpio/gpiolib.c",
"function": "gpiochip_setup_dev"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6daaa84b621485fe28c401be18debf92ae8ef04a",
"id": "CVE-2022-48975-3231dbe3",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "103820645485410694064073421037129548298",
"length": 451.0
},
"target": {
"file": "drivers/gpio/gpiolib.c",
"function": "gpiochip_setup_dev"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@371363716398ed718e389bea8c5e9843a79dde4e",
"id": "CVE-2022-48975-4463b096",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "103820645485410694064073421037129548298",
"length": 451.0
},
"target": {
"file": "drivers/gpio/gpiolib.c",
"function": "gpiochip_setup_dev"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec851b23084b3a0af8bf0f5e51d33a8d678bdc49",
"id": "CVE-2022-48975-63df45c8",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"8105838462547840213219202959945539456",
"176671609424456509580597542179355556973",
"76223660564030782976156606790611561356",
"270079098973367300059285194275724127392",
"52096749785023653598617721818675086632",
"312800571249878349894958830924129485941",
"28456810557291430890163095404963537626",
"55926181776367673706337340138405775560",
"100833469379091101949189460901458047177",
"119208805364467466132809974777643825095",
"201966649243023670137907308333251180094",
"33875183863179862508926369218161140496",
"52505356893805109460338286656517256506",
"142439719397987669192121518024064825089",
"263000755414251842816108983633664206290",
"33661000792930183101814476974841122900",
"175478300409945951386702433595781873190",
"167442026668699130807513686805562914416",
"18513258361800635202861459076237716335",
"284449768562144460066062660300022546407",
"207041433331596124291040880848216078573",
"114064458568152659129611570975495113546",
"124551554907897983703544266773903502742",
"195001355180765247167398904383782074390",
"10696293784113107541852947719485195824",
"246449461435438817998978400760493834815",
"328795011460771128157099041045523685776",
"39990694888151475038626896326311781065",
"230545741311242598304864785532044850616",
"101513459690262942791044111353098888857",
"272336353585379343183630232015509788815",
"121279497173215736478994810652467423617",
"23020873670662560637850940562018328569",
"111476612194837582715536364336126642791",
"216190657821806209134509231573944071894",
"18272268963154064456343069578622653351",
"255038039100624770770934260519988016397",
"95050367323471245383608091734520623512",
"266922876498945382969988324683349721140",
"338134740236054313254576776328997779692",
"28725318732308634748983530835294214148",
"28992657663832155451940018012483003003",
"260819165438036302290971957171646930268",
"288841153290770553371202631633402467778",
"11708311069395932598277017862634640029",
"153069116751504910789899546470304812339",
"187249664425247740251854613576574230307",
"319156095437813060770609892840880141347",
"168607641202679401299084556330482067581",
"280943287206353876589404017794783843511",
"22325795380062505885713185967564725555",
"249487163790460840196920394419039530119",
"121316376374510099865052458756378378432",
"265359016055381683443489181619015977453",
"282655951615863600800377368822384058727",
"211917050387455936347555469743484323765",
"71591505105331484535479981705212715064"
]
},
"target": {
"file": "drivers/gpio/gpiolib.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec851b23084b3a0af8bf0f5e51d33a8d678bdc49",
"id": "CVE-2022-48975-c069b932",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "245852021170985346628722848537649836474",
"length": 4416.0
},
"target": {
"file": "drivers/gpio/gpiolib.c",
"function": "gpiochip_add_data_with_key"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@371363716398ed718e389bea8c5e9843a79dde4e",
"id": "CVE-2022-48975-ec55f91a",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"8105838462547840213219202959945539456",
"176671609424456509580597542179355556973",
"76223660564030782976156606790611561356",
"270079098973367300059285194275724127392",
"52096749785023653598617721818675086632",
"312800571249878349894958830924129485941",
"28456810557291430890163095404963537626",
"55926181776367673706337340138405775560",
"100833469379091101949189460901458047177",
"119208805364467466132809974777643825095",
"201966649243023670137907308333251180094",
"33875183863179862508926369218161140496",
"52505356893805109460338286656517256506",
"142439719397987669192121518024064825089",
"263000755414251842816108983633664206290",
"33661000792930183101814476974841122900",
"175478300409945951386702433595781873190",
"167442026668699130807513686805562914416",
"18513258361800635202861459076237716335",
"284449768562144460066062660300022546407",
"207041433331596124291040880848216078573",
"114064458568152659129611570975495113546",
"124551554907897983703544266773903502742",
"195001355180765247167398904383782074390",
"10696293784113107541852947719485195824",
"246449461435438817998978400760493834815",
"328795011460771128157099041045523685776",
"39990694888151475038626896326311781065",
"230545741311242598304864785532044850616",
"101513459690262942791044111353098888857",
"272336353585379343183630232015509788815",
"121279497173215736478994810652467423617",
"23020873670662560637850940562018328569",
"111476612194837582715536364336126642791",
"216190657821806209134509231573944071894",
"18272268963154064456343069578622653351",
"255038039100624770770934260519988016397",
"95050367323471245383608091734520623512",
"266922876498945382969988324683349721140",
"338134740236054313254576776328997779692",
"28725318732308634748983530835294214148",
"28992657663832155451940018012483003003",
"260819165438036302290971957171646930268",
"288841153290770553371202631633402467778",
"11708311069395932598277017862634640029",
"153069116751504910789899546470304812339",
"187249664425247740251854613576574230307",
"319156095437813060770609892840880141347",
"168607641202679401299084556330482067581",
"280943287206353876589404017794783843511",
"22325795380062505885713185967564725555",
"249487163790460840196920394419039530119",
"121316376374510099865052458756378378432",
"265359016055381683443489181619015977453",
"282655951615863600800377368822384058727",
"211917050387455936347555469743484323765",
"71591505105331484535479981705212715064"
]
},
"target": {
"file": "drivers/gpio/gpiolib.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@371363716398ed718e389bea8c5e9843a79dde4e",
"id": "CVE-2022-48975-ef0a0113",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "143229055555424873952975738684009227076",
"length": 4250.0
},
"target": {
"file": "drivers/gpio/gpiolib.c",
"function": "gpiochip_add_data_with_key"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6daaa84b621485fe28c401be18debf92ae8ef04a",
"id": "CVE-2022-48975-f2c4f113",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"8105838462547840213219202959945539456",
"176671609424456509580597542179355556973",
"76223660564030782976156606790611561356",
"270079098973367300059285194275724127392",
"52096749785023653598617721818675086632",
"312800571249878349894958830924129485941",
"28456810557291430890163095404963537626",
"323419569977886229088850509622518319104",
"100833469379091101949189460901458047177",
"119208805364467466132809974777643825095",
"201966649243023670137907308333251180094",
"148034117466374271852188766016735430181",
"289458748072130452073743608703520302715",
"293041083754308319911831731798053297506",
"263000755414251842816108983633664206290",
"33661000792930183101814476974841122900",
"175478300409945951386702433595781873190",
"167442026668699130807513686805562914416",
"18513258361800635202861459076237716335",
"284449768562144460066062660300022546407",
"207041433331596124291040880848216078573",
"114064458568152659129611570975495113546",
"124551554907897983703544266773903502742",
"195001355180765247167398904383782074390",
"10696293784113107541852947719485195824",
"246449461435438817998978400760493834815",
"328795011460771128157099041045523685776",
"39990694888151475038626896326311781065",
"230545741311242598304864785532044850616",
"101513459690262942791044111353098888857",
"272336353585379343183630232015509788815",
"121279497173215736478994810652467423617",
"23020873670662560637850940562018328569",
"111476612194837582715536364336126642791",
"216190657821806209134509231573944071894",
"18272268963154064456343069578622653351",
"255038039100624770770934260519988016397",
"95050367323471245383608091734520623512",
"266922876498945382969988324683349721140",
"338134740236054313254576776328997779692",
"28725318732308634748983530835294214148",
"28992657663832155451940018012483003003",
"260819165438036302290971957171646930268",
"288841153290770553371202631633402467778",
"11708311069395932598277017862634640029",
"153069116751504910789899546470304812339",
"187249664425247740251854613576574230307",
"319156095437813060770609892840880141347",
"168607641202679401299084556330482067581",
"280943287206353876589404017794783843511",
"22325795380062505885713185967564725555",
"249487163790460840196920394419039530119",
"121316376374510099865052458756378378432",
"265359016055381683443489181619015977453",
"282655951615863600800377368822384058727",
"211917050387455936347555469743484323765",
"71591505105331484535479981705212715064"
]
},
"target": {
"file": "drivers/gpio/gpiolib.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6daaa84b621485fe28c401be18debf92ae8ef04a",
"id": "CVE-2022-48975-f3e2830d",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "245852021170985346628722848537649836474",
"length": 4416.0
},
"target": {
"file": "drivers/gpio/gpiolib.c",
"function": "gpiochip_add_data_with_key"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec851b23084b3a0af8bf0f5e51d33a8d678bdc49",
"id": "CVE-2022-48975-f607826a",
"deprecated": false,
"signature_version": "v1"
}
]