#VU96400 Memory leak in Linux kernel - CVE-2022-48928
Published: August 22, 2024 / Updated: May 12, 2025
Vulnerability identifier: #VU96400
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-48928
CWE-ID: CWE-401
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Linux kernel
Linux kernel
Software vendor:
Linux Foundation
Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the men_z188_probe() function in drivers/iio/adc/men_z188_adc.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
External links
- https://git.kernel.org/stable/c/0f88722313645a903f4d420ba61ddc690ec2481d
- https://git.kernel.org/stable/c/c5723b422f564af15f2e3bc0592fd6376a0a6c45
- https://git.kernel.org/stable/c/53d43a9c8dd224e66559fe86af1e473802c7130e
- https://git.kernel.org/stable/c/ce1076b33e299dc8d270e4450a420a18bfb3e190
- https://git.kernel.org/stable/c/1aa12ecfdcbafebc218910ec47acf6262e600cf5
- https://git.kernel.org/stable/c/fe73477802981bd0d0d70f2b22f109bcca801bdb
- https://git.kernel.org/stable/c/d6ed5426a7fad36cf928c244483ba24e72359638
- https://git.kernel.org/stable/c/e0a2e37f303828d030a83f33ffe14b36cb88d563
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.269
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.232
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.304
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.103
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.26
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.12
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.182