Memory Leak Affecting bpftool package, versions *
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-CENTOS8-BPFTOOL-7507753
- published 17 Jul 2024
- disclosed 16 Jul 2024
Introduced: 16 Jul 2024
CVE-2022-48863 Open this link in a new tabHow to fix?
There is no fixed version for Centos:8 bpftool.
NVD Description
Note: Versions mentioned in the description apply only to the upstream bpftool package and not the bpftool package as distributed by Centos.
See How to fix? for Centos:8 relevant fixed versions and status.
In the Linux kernel, the following vulnerability has been resolved:
mISDN: Fix memory leak in dsp_pipeline_build()
dsp_pipeline_build() allocates dup pointer by kstrdup(cfg), but then it updates dup variable by strsep(&dup, "|"). As a result when it calls kfree(dup), the dup variable contains NULL.
Found by Linux Driver Verification project (linuxtesting.org) with SVACE.
References
- https://access.redhat.com/security/cve/CVE-2022-48863
- https://git.kernel.org/stable/c/640445d6fc059d4514ffea79eb4196299e0e2d0f
- https://git.kernel.org/stable/c/7777b1f795af1bb43867375d8a776080111aae1b
- https://git.kernel.org/stable/c/a3d5fcc6cf2ecbba5a269631092570aa285a24cb
- https://git.kernel.org/stable/c/c6a502c2299941c8326d029cfc8a3bc8a4607ad5