CVE-2022-48863 Information

Description

In the Linux kernel the following vulnerability has been resolved:

mISDN: Fix memory leak in dsp_pipeline_build()

dsp_pipeline_build() allocates dup pointer by kstrdup(cfg) but then it updates dup variable by strsep(&dup |). As a result when it calls kfree(dup) the dup variable contains NULL.

Found by Linux Driver Verification project (linuxtesting.org) with SVACE.

Reference

https://git.kernel.org/stable/c/a3d5fcc6cf2ecbba5a269631092570aa285a24cb https://git.kernel.org/stable/c/7777b1f795af1bb43867375d8a776080111aae1b https://git.kernel.org/stable/c/640445d6fc059d4514ffea79eb4196299e0e2d0f https://git.kernel.org/stable/c/c6a502c2299941c8326d029cfc8a3bc8a4607ad5