PT-2024-11858

CVE-2022-48995

·

Published

2022-12-02

·

Updated

2025-09-29

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak issue has been identified in the Linux kernel, specifically in the raydium i2c send() function. This issue occurs when testing the raydium i2c ts with a BPF mock device, resulting in an unreferenced object. The backtrace indicates that the memory leak happens after the BANK SWITCH command from the I2C bus, regardless of whether the command is successful or not. The tx buf should be freed after this command.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025_16880
ALT-PU-2023-1066
OESA-2024-2371
OPENSUSE-SU-2024_3983-1
OPENSUSE-SU-2024_3985-1
OPENSUSE-SU-2024_4131-1
SUSE-SU-2024:3983-1
SUSE-SU-2024:3985-1
SUSE-SU-2024:4082-1
SUSE-SU-2024:4131-1
SUSE-SU-2024:4364-1
Found an issue in the description? Have something to add? Feel free to write us 👾