CVE-2022-48924

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2022-48924", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-08-21T06:06:23.296Z", "datePublished": "2024-08-22T01:33:05.770Z", "dateUpdated": "2026-05-11T18:49:47.105Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T18:49:47.105Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: int340x: fix memory leak in int3400_notify()\n\nIt is easy to hit the below memory leaks in my TigerLake platform:\n\nunreferenced object 0xffff927c8b91dbc0 (size 32):\n comm \"kworker/0:2\", pid 112, jiffies 4294893323 (age 83.604s)\n hex dump (first 32 bytes):\n 4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The\n 72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk.\n backtrace:\n [<ffffffff9c502c3e>] __kmalloc_track_caller+0x2fe/0x4a0\n [<ffffffff9c7b7c15>] kvasprintf+0x65/0xd0\n [<ffffffff9c7b7d6e>] kasprintf+0x4e/0x70\n [<ffffffffc04cb662>] int3400_notify+0x82/0x120 [int3400_thermal]\n [<ffffffff9c8b7358>] acpi_ev_notify_dispatch+0x54/0x71\n [<ffffffff9c88f1a7>] acpi_os_execute_deferred+0x17/0x30\n [<ffffffff9c2c2c0a>] process_one_work+0x21a/0x3f0\n [<ffffffff9c2c2e2a>] worker_thread+0x4a/0x3b0\n [<ffffffff9c2cb4dd>] kthread+0xfd/0x130\n [<ffffffff9c201c1f>] ret_from_fork+0x1f/0x30\n\nFix it by calling kfree() accordingly."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/thermal/intel/int340x_thermal/int3400_thermal.c"], "versions": [{"version": "38e44da591303d08b0d965a033e11ade284999d0", "lessThan": "f0ddc5184b0127038d05008e2a69f89d1e13f980", "status": "affected", "versionType": "git"}, {"version": "38e44da591303d08b0d965a033e11ade284999d0", "lessThan": "c3fa6d1937a8d0828131a04ae2cd2c30d0668693", "status": "affected", "versionType": "git"}, {"version": "38e44da591303d08b0d965a033e11ade284999d0", "lessThan": "2e798814e01827871938ff172d2b2ccf1e74b355", "status": "affected", "versionType": "git"}, {"version": "38e44da591303d08b0d965a033e11ade284999d0", "lessThan": "e098933866f9e1dd3ef4eebbe2e3d504f970f599", "status": "affected", "versionType": "git"}, {"version": "38e44da591303d08b0d965a033e11ade284999d0", "lessThan": "ba9efbbf6745750d34c1e87c9539ce9db645ca0a", "status": "affected", "versionType": "git"}, {"version": "38e44da591303d08b0d965a033e11ade284999d0", "lessThan": "33c73a4d7e7b19313a6b417152f5365016926418", "status": "affected", "versionType": "git"}, {"version": "38e44da591303d08b0d965a033e11ade284999d0", "lessThan": "3abea10e6a8f0e7804ed4c124bea2d15aca977c8", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/thermal/intel/int340x_thermal/int3400_thermal.c"], "versions": [{"version": "4.14", "status": "affected"}, {"version": "0", "lessThan": "4.14", "status": "unaffected", "versionType": "semver"}, {"version": "4.14.274", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.237", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.188", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.103", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.26", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.16.12", "lessThanOrEqual": "5.16.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.17", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "4.14.274"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "4.19.237"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.4.188"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.10.103"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.15.26"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.16.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.17"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f0ddc5184b0127038d05008e2a69f89d1e13f980"}, {"url": "https://git.kernel.org/stable/c/c3fa6d1937a8d0828131a04ae2cd2c30d0668693"}, {"url": "https://git.kernel.org/stable/c/2e798814e01827871938ff172d2b2ccf1e74b355"}, {"url": "https://git.kernel.org/stable/c/e098933866f9e1dd3ef4eebbe2e3d504f970f599"}, {"url": "https://git.kernel.org/stable/c/ba9efbbf6745750d34c1e87c9539ce9db645ca0a"}, {"url": "https://git.kernel.org/stable/c/33c73a4d7e7b19313a6b417152f5365016926418"}, {"url": "https://git.kernel.org/stable/c/3abea10e6a8f0e7804ed4c124bea2d15aca977c8"}], "title": "thermal: int340x: fix memory leak in int3400_notify()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48924", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:33:18.769606Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-12T17:33:00.629Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48924", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:33:18.769606Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:12.715Z"}}], "cna": {"title": "thermal: int340x: fix memory leak in int3400_notify()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "38e44da59130", "lessThan": "f0ddc5184b01", "versionType": "git"}, {"status": "affected", "version": "38e44da59130", "lessThan": "c3fa6d1937a8", "versionType": "git"}, {"status": "affected", "version": "38e44da59130", "lessThan": "2e798814e018", "versionType": "git"}, {"status": "affected", "version": "38e44da59130", "lessThan": "e098933866f9", "versionType": "git"}, {"status": "affected", "version": "38e44da59130", "lessThan": "ba9efbbf6745", "versionType": "git"}, {"status": "affected", "version": "38e44da59130", "lessThan": "33c73a4d7e7b", "versionType": "git"}, {"status": "affected", "version": "38e44da59130", "lessThan": "3abea10e6a8f", "versionType": "git"}], "programFiles": ["drivers/thermal/intel/int340x_thermal/int3400_thermal.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.14"}, {"status": "unaffected", "version": "0", "lessThan": "4.14", "versionType": "custom"}, {"status": "unaffected", "version": "4.14.274", "versionType": "custom", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.237", "versionType": "custom", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.188", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.103", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.26", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16.12", "versionType": "custom", "lessThanOrEqual": "5.16.*"}, {"status": "unaffected", "version": "5.17", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/thermal/intel/int340x_thermal/int3400_thermal.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/f0ddc5184b0127038d05008e2a69f89d1e13f980"}, {"url": "https://git.kernel.org/stable/c/c3fa6d1937a8d0828131a04ae2cd2c30d0668693"}, {"url": "https://git.kernel.org/stable/c/2e798814e01827871938ff172d2b2ccf1e74b355"}, {"url": "https://git.kernel.org/stable/c/e098933866f9e1dd3ef4eebbe2e3d504f970f599"}, {"url": "https://git.kernel.org/stable/c/ba9efbbf6745750d34c1e87c9539ce9db645ca0a"}, {"url": "https://git.kernel.org/stable/c/33c73a4d7e7b19313a6b417152f5365016926418"}, {"url": "https://git.kernel.org/stable/c/3abea10e6a8f0e7804ed4c124bea2d15aca977c8"}], "x_generator": {"engine": "bippy-c9c4e1df01b2"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: int340x: fix memory leak in int3400_notify()\n\nIt is easy to hit the below memory leaks in my TigerLake platform:\n\nunreferenced object 0xffff927c8b91dbc0 (size 32):\n comm \"kworker/0:2\", pid 112, jiffies 4294893323 (age 83.604s)\n hex dump (first 32 bytes):\n 4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The\n 72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk.\n backtrace:\n [<ffffffff9c502c3e>] __kmalloc_track_caller+0x2fe/0x4a0\n [<ffffffff9c7b7c15>] kvasprintf+0x65/0xd0\n [<ffffffff9c7b7d6e>] kasprintf+0x4e/0x70\n [<ffffffffc04cb662>] int3400_notify+0x82/0x120 [int3400_thermal]\n [<ffffffff9c8b7358>] acpi_ev_notify_dispatch+0x54/0x71\n [<ffffffff9c88f1a7>] acpi_os_execute_deferred+0x17/0x30\n [<ffffffff9c2c2c0a>] process_one_work+0x21a/0x3f0\n [<ffffffff9c2c2e2a>] worker_thread+0x4a/0x3b0\n [<ffffffff9c2cb4dd>] kthread+0xfd/0x130\n [<ffffffff9c201c1f>] ret_from_fork+0x1f/0x30\n\nFix it by calling kfree() accordingly."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-08-22T03:31:15.162Z"}}}, "cveMetadata": {"cveId": "CVE-2022-48924", "state": "PUBLISHED", "dateUpdated": "2024-09-12T17:33:00.629Z", "dateReserved": "2024-08-21T06:06:23.296Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-08-22T01:33:05.770Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/thermal/intel/int340x_thermal/int3400_thermal.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f0ddc5184b0127038d05008e2a69f89d1e13f980", "status": "affected", "version": "38e44da591303d08b0d965a033e11ade284999d0", "versionType": "git"}, {"lessThan": "c3fa6d1937a8d0828131a04ae2cd2c30d0668693", "status": "affected", "version": "38e44da591303d08b0d965a033e11ade284999d0", "versionType": "git"}, {"lessThan": "2e798814e01827871938ff172d2b2ccf1e74b355", "status": "affected", "version": "38e44da591303d08b0d965a033e11ade284999d0", "versionType": "git"}, {"lessThan": "e098933866f9e1dd3ef4eebbe2e3d504f970f599", "status": "affected", "version": "38e44da591303d08b0d965a033e11ade284999d0", "versionType": "git"}, {"lessThan": "ba9efbbf6745750d34c1e87c9539ce9db645ca0a", "status": "affected", "version": "38e44da591303d08b0d965a033e11ade284999d0", "versionType": "git"}, {"lessThan": "33c73a4d7e7b19313a6b417152f5365016926418", "status": "affected", "version": "38e44da591303d08b0d965a033e11ade284999d0", "versionType": "git"}, {"lessThan": "3abea10e6a8f0e7804ed4c124bea2d15aca977c8", "status": "affected", "version": "38e44da591303d08b0d965a033e11ade284999d0", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/thermal/intel/int340x_thermal/int3400_thermal.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.14"}, {"lessThan": "4.14", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "4.14.*", "status": "unaffected", "version": "4.14.274", "versionType": "semver"}, {"lessThanOrEqual": "4.19.*", "status": "unaffected", "version": "4.19.237", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.188", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.103", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.26", "versionType": "semver"}, {"lessThanOrEqual": "5.16.*", "status": "unaffected", "version": "5.16.12", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "5.17", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "66FD29ED-3573-4532-BDEF-8D09E54DFC2B", "versionEndExcluding": "4.14.274", "versionStartIncluding": "4.14", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C479DB4A-41B9-4940-B214-841C74E2C1FA", "versionEndExcluding": "4.19.237", "versionStartIncluding": "4.15", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "670BCB59-E3C8-496D-BD17-297C113776FA", "versionEndExcluding": "5.4.188", "versionStartIncluding": "4.20", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "1A95B717-3110-4D4F-B8FC-373919BB514D", "versionEndExcluding": "5.10.103", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AB342AE-A62E-4947-A6EA-511453062B2B", "versionEndExcluding": "5.15.26", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C76BAB21-7F23-4AD8-A25F-CA7B262A2698", "versionEndExcluding": "5.16.12", "versionStartIncluding": "5.16", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: int340x: fix memory leak in int3400_notify()\n\nIt is easy to hit the below memory leaks in my TigerLake platform:\n\nunreferenced object 0xffff927c8b91dbc0 (size 32):\n comm \"kworker/0:2\", pid 112, jiffies 4294893323 (age 83.604s)\n hex dump (first 32 bytes):\n 4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The\n 72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk.\n backtrace:\n [<ffffffff9c502c3e>] __kmalloc_track_caller+0x2fe/0x4a0\n [<ffffffff9c7b7c15>] kvasprintf+0x65/0xd0\n [<ffffffff9c7b7d6e>] kasprintf+0x4e/0x70\n [<ffffffffc04cb662>] int3400_notify+0x82/0x120 [int3400_thermal]\n [<ffffffff9c8b7358>] acpi_ev_notify_dispatch+0x54/0x71\n [<ffffffff9c88f1a7>] acpi_os_execute_deferred+0x17/0x30\n [<ffffffff9c2c2c0a>] process_one_work+0x21a/0x3f0\n [<ffffffff9c2c2e2a>] worker_thread+0x4a/0x3b0\n [<ffffffff9c2cb4dd>] kthread+0xfd/0x130\n [<ffffffff9c201c1f>] ret_from_fork+0x1f/0x30\n\nFix it by calling kfree() accordingly."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: t\u00e9rmica: int340x: corrige la p\u00e9rdida de memoria en int3400_notify() Es f\u00e1cil solucionar las siguientes p\u00e9rdidas de memoria en mi plataforma TigerLake: objeto sin referencia 0xffff927c8b91dbc0 (tama\u00f1o 32): comm \"kworker/0 :2\", pid 112, santiam\u00e9n 4294893323 (edad 83.604s) volcado hexadecimal (primeros 32 bytes): 4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The 72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk. seguimiento: [] __kmalloc_track_caller+0x2fe/0x4a0 [] kvasprintf+0x65/0xd0 [] kasprintf+0x4e/0x70 [] notificar+0x82/0x120 [int3400_thermal] [] acpi_ev_notify_dispatch+0x54/0x71 [] acpi_os_execute_deferred+0x17/0x30 [] Process_one_work+0x21a/0x3f0 [] trabajador_thread+0x4a/0x3b0 ffffffff9c2cb4dd&gt;] kthread+0xfd/0x130 [] ret_from_fork+0x1f/0x30 Solucionarlo llamando a kfree() en consecuencia."}], "id": "CVE-2022-48924", "lastModified": "2026-06-17T05:16:37.737", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-48924", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-09-10T15:33:18.769606Z", "version": "2.0.3"}}]}, "published": "2024-08-22T02:15:08.527", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2e798814e01827871938ff172d2b2ccf1e74b355"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/33c73a4d7e7b19313a6b417152f5365016926418"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3abea10e6a8f0e7804ed4c124bea2d15aca977c8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ba9efbbf6745750d34c1e87c9539ce9db645ca0a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c3fa6d1937a8d0828131a04ae2cd2c30d0668693"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e098933866f9e1dd3ef4eebbe2e3d504f970f599"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f0ddc5184b0127038d05008e2a69f89d1e13f980"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: thermal: int340x: fix memory leak in int3400_notify()", "id": "2307177", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2307177"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-401", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nthermal: int340x: fix memory leak in int3400_notify()\nIt is easy to hit the below memory leaks in my TigerLake platform:\nunreferenced object 0xffff927c8b91dbc0 (size 32):\ncomm \"kworker/0:2\", pid 112, jiffies 4294893323 (age 83.604s)\nhex dump (first 32 bytes):\n4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65 NAME=INT3400 The\n72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 rmal.kkkkkkkkkk.\nbacktrace:\n[<ffffffff9c502c3e>] __kmalloc_track_caller+0x2fe/0x4a0\n[<ffffffff9c7b7c15>] kvasprintf+0x65/0xd0\n[<ffffffff9c7b7d6e>] kasprintf+0x4e/0x70\n[<ffffffffc04cb662>] int3400_notify+0x82/0x120 [int3400_thermal]\n[<ffffffff9c8b7358>] acpi_ev_notify_dispatch+0x54/0x71\n[<ffffffff9c88f1a7>] acpi_os_execute_deferred+0x17/0x30\n[<ffffffff9c2c2c0a>] process_one_work+0x21a/0x3f0\n[<ffffffff9c2c2e2a>] worker_thread+0x4a/0x3b0\n[<ffffffff9c2cb4dd>] kthread+0xfd/0x130\n[<ffffffff9c201c1f>] ret_from_fork+0x1f/0x30\nFix it by calling kfree() accordingly.", "A memory leak flaw was found in the `int3400_notify()` function in the Linux Kernel, related to `thermal: int340x`, affecting platforms like TigerLake. This issue occurs when memory allocated using `kasprintf()` is not freed, leading to unreferenced objects and memory leaks."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2022-48924", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-08-22T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-48924\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-48924\nhttps://lore.kernel.org/linux-cve-announce/2024082220-CVE-2022-48924-9c5f@gregkh/T"], "statement": "Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux Kernel used in its distributions.", "threat_severity": "Moderate"}

{}