CVE-2022-48661

MEDIUM

Linux Kernel < 5.15.71 - Improper Resource Release

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fix potential resource leakage when register a chip If creation of software node fails, the locally allocated string array is left unfreed. Free it on error path.

References (3)

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 4.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-404
Status published

Affected Products (3)

linux/linux_kernel < 5.15.71
linux/Kernel < 5.15.71linux
linux/Kernel < 5.19.12linux

Timeline

Published Apr 28, 2024
Tracked Since Feb 18, 2026