CVE-2022-48639 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tc_new_tfilter() tfilter_put need to be called to put the refount got by tp->ops->get to avoid possible refcount leak when chain->tmplt_ops != NULL and chain->tmplt_ops != tp->ops.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0559d91ee3a2cd81b15ad5cd507539d6da867f88
https://git.kernel.org/stable/c/8844c750eeb03452e2b3319c27a526f447b82596
https://git.kernel.org/stable/c/903f7d322c17d8e306d766404b4604e81653902a
https://git.kernel.org/stable/c/c2e1cfefcac35e0eea229e148c8284088ce437b5
https://git.kernel.org/stable/c/f8162aed962be8fa07445b2b5928e84ab40dd8d7
https://lore.kernel.org/linux-cve-announce/2024042855-CVE-2022-48639-be80@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48639
https://www.cve.org/CVERecord?id=CVE-2022-48639

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-28T12:59:42.410Z

Updated: 2024-08-03T15:17:55.459Z

Reserved: 2024-02-25T13:44:28.316Z

Link: CVE-2022-48639

Vulnrichment

Updated: 2024-08-03T15:17:55.459Z

NVD

Status : Awaiting Analysis

Published: 2024-04-28T13:15:06.857

Modified: 2024-04-29T12:42:03.667

Link: CVE-2022-48639

Redhat

Severity : Low

Publid Date: 2024-04-28T00:00:00Z

Links: CVE-2022-48639 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-48639", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-25T13:44:28.316Z", "datePublished": "2024-04-28T12:59:42.410Z", "dateUpdated": "2024-08-03T15:17:55.459Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:10:39.942Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix possible refcount leak in tc_new_tfilter()\n\ntfilter_put need to be called to put the refount got by tp->ops->get to\navoid possible refcount leak when chain->tmplt_ops != NULL and\nchain->tmplt_ops != tp->ops."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/sched/cls_api.c"], "versions": [{"version": "7d5509fa0d3d", "lessThan": "903f7d322c17", "status": "affected", "versionType": "git"}, {"version": "7d5509fa0d3d", "lessThan": "8844c750eeb0", "status": "affected", "versionType": "git"}, {"version": "7d5509fa0d3d", "lessThan": "f8162aed962b", "status": "affected", "versionType": "git"}, {"version": "7d5509fa0d3d", "lessThan": "0559d91ee3a2", "status": "affected", "versionType": "git"}, {"version": "7d5509fa0d3d", "lessThan": "c2e1cfefcac3", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/sched/cls_api.c"], "versions": [{"version": "5.1", "status": "affected"}, {"version": "0", "lessThan": "5.1", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.215", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.146", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.15.71", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.19.12", "lessThanOrEqual": "5.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/903f7d322c17d8e306d766404b4604e81653902a"}, {"url": "https://git.kernel.org/stable/c/8844c750eeb03452e2b3319c27a526f447b82596"}, {"url": "https://git.kernel.org/stable/c/f8162aed962be8fa07445b2b5928e84ab40dd8d7"}, {"url": "https://git.kernel.org/stable/c/0559d91ee3a2cd81b15ad5cd507539d6da867f88"}, {"url": "https://git.kernel.org/stable/c/c2e1cfefcac35e0eea229e148c8284088ce437b5"}], "title": "net: sched: fix possible refcount leak in tc_new_tfilter()", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48639", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-28T18:40:42.909277Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:16:40.764Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.459Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/903f7d322c17d8e306d766404b4604e81653902a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8844c750eeb03452e2b3319c27a526f447b82596", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f8162aed962be8fa07445b2b5928e84ab40dd8d7", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0559d91ee3a2cd81b15ad5cd507539d6da867f88", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c2e1cfefcac35e0eea229e148c8284088ce437b5", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/903f7d322c17d8e306d766404b4604e81653902a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8844c750eeb03452e2b3319c27a526f447b82596", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f8162aed962be8fa07445b2b5928e84ab40dd8d7", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0559d91ee3a2cd81b15ad5cd507539d6da867f88", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c2e1cfefcac35e0eea229e148c8284088ce437b5", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.459Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48639", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-28T18:40:42.909277Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-28T18:40:50.453Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "net: sched: fix possible refcount leak in tc_new_tfilter()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "7d5509fa0d3d", "lessThan": "903f7d322c17", "versionType": "git"}, {"status": "affected", "version": "7d5509fa0d3d", "lessThan": "8844c750eeb0", "versionType": "git"}, {"status": "affected", "version": "7d5509fa0d3d", "lessThan": "f8162aed962b", "versionType": "git"}, {"status": "affected", "version": "7d5509fa0d3d", "lessThan": "0559d91ee3a2", "versionType": "git"}, {"status": "affected", "version": "7d5509fa0d3d", "lessThan": "c2e1cfefcac3", "versionType": "git"}], "programFiles": ["net/sched/cls_api.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.1"}, {"status": "unaffected", "version": "0", "lessThan": "5.1", "versionType": "custom"}, {"status": "unaffected", "version": "5.4.215", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.146", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.71", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.19.12", "versionType": "custom", "lessThanOrEqual": "5.19.*"}, {"status": "unaffected", "version": "6.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/sched/cls_api.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/903f7d322c17d8e306d766404b4604e81653902a"}, {"url": "https://git.kernel.org/stable/c/8844c750eeb03452e2b3319c27a526f447b82596"}, {"url": "https://git.kernel.org/stable/c/f8162aed962be8fa07445b2b5928e84ab40dd8d7"}, {"url": "https://git.kernel.org/stable/c/0559d91ee3a2cd81b15ad5cd507539d6da867f88"}, {"url": "https://git.kernel.org/stable/c/c2e1cfefcac35e0eea229e148c8284088ce437b5"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix possible refcount leak in tc_new_tfilter()\n\ntfilter_put need to be called to put the refount got by tp->ops->get to\navoid possible refcount leak when chain->tmplt_ops != NULL and\nchain->tmplt_ops != tp->ops."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:10:39.942Z"}}}, "cveMetadata": {"cveId": "CVE-2022-48639", "state": "PUBLISHED", "dateUpdated": "2024-08-03T15:17:55.459Z", "dateReserved": "2024-02-25T13:44:28.316Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-28T12:59:42.410Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}