PT-2024-7854 · Linux+9 · Linux Kernel+9

Qiheng Lin

·

Published

2024-03-03

·

Updated

2025-09-29

·

CVE-2022-48669

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a potential memory leak in the papr get attr() function. The buf variable is allocated in this function, and if the krealloc() of buf fails, the original buf needs to be freed to prevent a memory leak. This could allow an attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2024:3618
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2024-09356
CESA-2024_3618
CVE-2022-48669
INFSA-2024_3618
INFSA-2024_9315
RHSA-2024:3618
RHSA-2024:9315
RHSA-2024_3618
RHSA-2024_9315
RHSA-2025:13135
RLSA-2024:3618
SUSE-SU-2024:2008-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2190-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6816-1
USN-6817-1
USN-6817-2
USN-6817-3
USN-6878-1

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu