CVE Database›CVE-2022-48885

CVE-2022-48885

kernel: ice: Fix potential memory leak in ice_gnss_tty_write()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 21, 2024

Updated · October 29, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix potential memory leak in ice_gnss_tty_write()

The ice_gnss_tty_write() return directly if the write_buf alloc failed, leaking the cmd_buf.

Fix by free cmd_buf if write_buf alloc failed.

Statement

This issue is fixed in RHEL-9.2 and above

8cb1cac4610d (in rhel-9.2, rhel-9.3, rhel-9.4, rhel-9.5) ice: Fix potential memory leak in ice_gnss_tty_write()

Please note that while RHEL-9 kernel-rt still appears as affected, it has been fixed in the same RHSA as RHEL-9 kernel. This is because from RHEL-9.3 onwards, the kernel and kernel-rt fixes are bundled together in a single errata.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-401 · Missing Release of Memory after Effective Lifetime