What’s Vulnerable › Vulnerabilities

CVE-2022-48661: gpio: mockup: Fix potential resource leakage when register a chip

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-28 · updated 2026-06-17
• Weakness: CWE-404

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fix potential resource leakage when register a chip If creation of software node fails, the locally allocated string array is left unfreed. Free it on error path.

Affected products

• Linux kernel: from 5.15 before 5.15.71; from 5.16 before 5.19.12 — fixed in 5.15.71, 5.19.12

How to fix

Upgrade to a fixed version: Linux kernel 5.15.71, 5.19.12. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/02743c4091ccfb246f5cdbbe3f44b152d5d12933
• https://git.kernel.org/stable/c/41f857033c44442a27f591fda8d986e7c9e42872
• https://git.kernel.org/stable/c/9b26723e058faaf11b532fb4aa16d6849d581790
• https://git.kernel.org/stable/c/02743c4091ccfb246f5cdbbe3f44b152d5d12933
• https://git.kernel.org/stable/c/41f857033c44442a27f591fda8d986e7c9e42872
• https://git.kernel.org/stable/c/9b26723e058faaf11b532fb4aa16d6849d581790

Get alerted when CVE-2022-48661 or the next vulnerability affects your stack