NetSight
medium5.5

CVE-2022-48768

In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an error…

Impact

In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an error path to free the memory allocated by kstrdup(): p = param = kstrdup(data->params[i], GFP_KERNEL); So it is better to free it via kfree(p).

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.4.19 before 5.4.176
from 5.6 before 5.10.96
from 5.11 before 5.15.19
from 5.16 before 5.16.5
Version 5.17

Weakness classification

References