CVE-2022-48831 - ima: fix reference leak in asymmetric_verify()

MEDIUM

ima: fix reference leak in asymmetric_verify()

Published Jul 16, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.27%

Don't leak a reference to the key if its algorithm is unknown.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Will not fix	n/a
Red Hat Enterprise Linux 9	kernel-rt	Will not fix	n/a

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48831		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2298170		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53710		Advisory
https://git.kernel.org/stable/c/0838d6d68182f0b28a5434bc6d50727c4757e35b		Patch
https://git.kernel.org/stable/c/89f586d3398f4cc0432ed870949dffb702940754		Patch
https://git.kernel.org/stable/c/926fd9f23b27ca6587492c3f58f4c7f4cd01dad5		Patch
https://lore.kernel.org/linux-cve-announce/2024071653-CVE-2022-48831-d6b7@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48831
https://www.cve.org/CVERecord?id=CVE-2022-48831