PT-2024-11859 · Linux · Linux Kernel

Published 2022-11-22 · Updated 2024-11-07 · CVE-2022-48996

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the damon sysfs set schemes() function. The issue arises from an incorrect assumption that the DAMON context would not have schemes, leading to the creation and addition of new schemes. This results in the code not working as intended for online schemes tuning and potentially causing a larger than expected memory footprint. The schemes are contained within the DAMON context, preventing memory leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-672

Related Identifiers

BDU:2025-14269

CVE-2022-48996

Affected Products

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48996.json · Exploit
• https://bdu.fstec.ru/vul/2025-14269 · Security Note
• https://git.kernel.org/stable/c/f98d1f2a36ad7ab48fb4cf73ca14e7b19482fd4d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48996 · Security Note
• https://ubuntu.com/security/CVE-2022-48996 · Vendor Advisory
• https://git.kernel.org/stable/c/95bc35f9bee5220dad4e8567654ab3288a181639 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-48996 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48996 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48996 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48996 · Security Note
• https://git.kernel.org/linus/95bc35f9bee5220dad4e8567654ab3288a181639 · Note
• https://t.me/cvenotify/100975 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.12 · Note