NVD Vulnerability Detail

CVE-2022-49011

Summary	In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So call it after using to avoid refcount leak.
Publication Date	Oct. 22, 2024, 5:15 a.m.
Registration Date	Oct. 22, 2024, 12:01 p.m.
Last Update	Oct. 25, 2024, 4:01 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/bb75a0d1223d43f97089841aecb28a9b4de687a9	Patch
2	https://git.kernel.org/stable/c/0dd1da5a15eeecb2fe4cf131b3216fb455af783c	Patch
3	https://git.kernel.org/stable/c/2f74cffc7c85f770b1b1833dccb03b8cde3be102	Patch
4	https://git.kernel.org/stable/c/ea5844f946b1ec5c0b7c115cd7684f34fd48021b	Patch
5	https://git.kernel.org/stable/c/c40db1e5f316792b557d2be37e447c20d9ac4635	Patch
6	https://git.kernel.org/stable/c/6e035d5a2a6b907cfce9a80c5f442c2e459cd34e	Patch
7	https://git.kernel.org/stable/c/f598da27acbeee414679cacd14294db3e273e3d2	Patch
8	https://git.kernel.org/stable/c/7dec14537c5906b8bf40fd6fd6d9c3850f8df11d	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-401	有効期限後のメモリの解放の欠如	https://cwe.mitre.org/data/definitions/401.html

JVN Vulnerability Information

Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性

Title	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性
Summary	Linux の Linux Kernel には、有効期限後のメモリの解放の欠如に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Dec. 1, 2022, midnight
Registration Date	Oct. 25, 2024, 2:37 p.m.
Last Update	Oct. 25, 2024, 2:37 p.m.

Affected System

Linux

Linux Kernel 3.14 以上 4.9.335 未満

Linux Kernel 4.10 以上 4.14.301 未満

Linux Kernel 4.15 以上 4.19.268 未満

Linux Kernel 4.20 以上 5.4.226 未満

Linux Kernel 5.11 以上 5.15.82 未満

Linux Kernel 5.16 以上 6.0.12 未満

Linux Kernel 5.5 以上 5.10.158 未満

Linux Kernel 6.1

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2022-49011	https://www.cve.org/CVERecord?id=CVE-2022-49011
National Vulnerability Database (NVD)
2	CVE-2022-49011	https://nvd.nist.gov/vuln/detail/CVE-2022-49011

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-401	https://cwe.mitre.org/data/definitions/401.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (0dd1da5)	https://git.kernel.org/stable/c/0dd1da5a15eeecb2fe4cf131b3216fb455af783c
2	hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (2f74cff)	https://git.kernel.org/stable/c/2f74cffc7c85f770b1b1833dccb03b8cde3be102
3	hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (6e035d5)	https://git.kernel.org/stable/c/6e035d5a2a6b907cfce9a80c5f442c2e459cd34e
4	hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (7dec145)	https://git.kernel.org/stable/c/7dec14537c5906b8bf40fd6fd6d9c3850f8df11d
5	hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (bb75a0d)	https://git.kernel.org/stable/c/bb75a0d1223d43f97089841aecb28a9b4de687a9
6	hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (c40db1e)	https://git.kernel.org/stable/c/c40db1e5f316792b557d2be37e447c20d9ac4635
7	hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (ea5844f)	https://git.kernel.org/stable/c/ea5844f946b1ec5c0b7c115cd7684f34fd48021b
8	hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (f598da2)	https://git.kernel.org/stable/c/f598da27acbeee414679cacd14294db3e273e3d2
Linux Kernel
9	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月25日] 掲載	Oct. 25, 2024, 9:43 a.m.