CVE-2022-48831

MEDIUM

Linux Kernel 5.13-5.15.24 and 5.16.0-5.16.10 - Reference Leak in IMA Asymmetric Verify

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ima: fix reference leak in asymmetric_verify() Don't leak a reference to the key if its algorithm is unknown.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/0838d6d68182f0b28a5434bc6d50727c4757e35b

Patch

https://git.kernel.org/stable/c/89f586d3398f4cc0432ed870949dffb702940754

Patch

https://git.kernel.org/stable/c/926fd9f23b27ca6587492c3f58f4c7f4cd01dad5

Scores

CVSS v3 5.5

EPSS 0.0027

EPSS Percentile 18.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (12)

linux/Kernel 5.13.0 - 5.15.24linux

linux/Kernel 5.16.0 - 5.16.10linux

Linux/Linux < 5.13

Linux/Linux 5.13

Linux/Linux 5.15.24 - 5.15.*

Linux/Linux 5.16.10 - 5.16.*

Linux/Linux 5.17

Linux/Linux 947d70597236dd5ae65c1f68c8eabfb962ee5a6b - 0838d6d68182f0b28a5434bc6d50727c4757e35b

Linux/Linux 947d70597236dd5ae65c1f68c8eabfb962ee5a6b - 89f586d3398f4cc0432ed870949dffb702940754

Linux/Linux 947d70597236dd5ae65c1f68c8eabfb962ee5a6b - 926fd9f23b27ca6587492c3f58f4c7f4cd01dad5

... and 2 more

Published Jul 16, 2024

Tracked Since Feb 18, 2026