What’s Vulnerable › Vulnerabilities

CVE-2022-48698: drm/amd/display: fix memory leak when using debugfs_lookup()

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-03 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix memory leak when using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. Fix this up by properly calling dput().

Affected products

• Linux kernel: before 5.15.68; from 5.16 before 5.19.9; 6.0-rc1, 6.0-rc2, 6.0-rc3, 6.0-rc4 — fixed in 5.15.68, 5.19.9

How to fix

Upgrade to a fixed version: Linux kernel 5.15.68, 5.19.9. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3a6279d243cb035eaaff1450980b40cf19748f05
• https://git.kernel.org/stable/c/58acd2ebae034db3bacf38708f508fbd12ae2e54
• https://git.kernel.org/stable/c/cbfac7fa491651c57926c99edeb7495c6c1aeac2
• https://git.kernel.org/stable/c/3a6279d243cb035eaaff1450980b40cf19748f05
• https://git.kernel.org/stable/c/58acd2ebae034db3bacf38708f508fbd12ae2e54
• https://git.kernel.org/stable/c/cbfac7fa491651c57926c99edeb7495c6c1aeac2

Get alerted when CVE-2022-48698 or the next vulnerability affects your stack