CVE-2022-48699

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48699
In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in update_sched_domain_debugfs Kuyo reports that the pattern of using debugfs_remove(debugfs_lookup()) leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by using the newly created debugfs_lookup_and_remove() call instead which properly handles the dentry reference counting logic.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0c32a93963e03c03e561d5a066eedad211880ba3 Patch
https://git.kernel.org/stable/c/26e9a1ded8923510e5529fbb28390b22228700c2 Patch
https://git.kernel.org/stable/c/c2e406596571659451f4b95e37ddfd5a8ef1d0dc Patch
https://git.kernel.org/stable/c/0c32a93963e03c03e561d5a066eedad211880ba3 Patch
https://git.kernel.org/stable/c/26e9a1ded8923510e5529fbb28390b22228700c2 Patch
https://git.kernel.org/stable/c/c2e406596571659451f4b95e37ddfd5a8ef1d0dc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
History

18 Sep 2025, 17:06

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/0c32a93963e03c03e561d5a066eedad211880ba3 - () https://git.kernel.org/stable/c/0c32a93963e03c03e561d5a066eedad211880ba3 - Patch
References () https://git.kernel.org/stable/c/26e9a1ded8923510e5529fbb28390b22228700c2 - () https://git.kernel.org/stable/c/26e9a1ded8923510e5529fbb28390b22228700c2 - Patch
References () https://git.kernel.org/stable/c/c2e406596571659451f4b95e37ddfd5a8ef1d0dc - () https://git.kernel.org/stable/c/c2e406596571659451f4b95e37ddfd5a8ef1d0dc - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*

21 Nov 2024, 07:33

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0c32a93963e03c03e561d5a066eedad211880ba3 - () https://git.kernel.org/stable/c/0c32a93963e03c03e561d5a066eedad211880ba3 -
References () https://git.kernel.org/stable/c/26e9a1ded8923510e5529fbb28390b22228700c2 - () https://git.kernel.org/stable/c/26e9a1ded8923510e5529fbb28390b22228700c2 -
References () https://git.kernel.org/stable/c/c2e406596571659451f4b95e37ddfd5a8ef1d0dc - () https://git.kernel.org/stable/c/c2e406596571659451f4b95e37ddfd5a8ef1d0dc -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sched/debug: corrige la fuga de dentry en update_sched_domain_debugfs Kuyo informa que el patrón de uso de debugfs_remove(debugfs_lookup()) pierde un dentry y con una prueba de estrés de conexión en caliente, la máquina eventualmente se queda sin memoria. Solucione este problema utilizando la llamada debugfs_lookup_and_remove() recién creada, que maneja adecuadamente la lógica de conteo de referencias de dentry.

03 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 16:15

Updated : 2025-09-19 14:48

NVD link : CVE-2022-48699

Mitre link : CVE-2022-48699

CVE.ORG link : CVE-2022-48699

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime