Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-48996 Details

Description

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes() Commit da87878010e5 ("mm/damon/sysfs: support online inputs update") made 'damon_sysfs_set_schemes()' to be called for running DAMON context, which could have schemes. In the case, DAMON sysfs interface is supposed to update, remove, or add schemes to reflect the sysfs files. However, the code is assuming the DAMON context wouldn't have schemes at all, and therefore creates and adds new schemes. As a result, the code doesn't work as intended for online schemes tuning and could have more than expected memory footprint. The schemes are all in the DAMON context, so it doesn't leak the memory, though. Remove the wrong asssumption (the DAMON context wouldn't have schemes) in 'damon_sysfs_set_schemes()' to fix the bug.

Metrics

CVSS 3.x Severity and Vector Strings:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.19, < 6.0.12
6.1 rc1
6.1 rc2
6.1 rc3
6.1 rc4

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2022-48996
NVD Published Date:
Oct 21, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org