CVE-2022-48709: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability was discovered in the Linux kernel's ice driver, identified as CVE-2022-48709. The issue affects Linux kernel versions from 5.16 up to (excluding) 6.1.12, and version 6.2 release candidates (rc1 through rc7). The vulnerability was discovered in the ice_add_adv_recipe() function where a memory leak occurs when ice_add_special_words() fails, as the 'rm' resource is not properly released (NVD).

The vulnerability exists in the Linux kernel's ice switch driver where a memory leak occurs in the ice_add_adv_recipe() function. When the ice_add_special_words() function fails, the 'rm' resource is not properly released, leading to a memory leak. The issue was fixed by modifying the error handling path to go to the 'err_unroll' label instead of 'err_free_lkup_exts'. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD, Kernel Patch).

The vulnerability results in a memory leak in the Linux kernel's ice driver. While there is no direct impact on confidentiality or integrity, the availability of the system could be affected due to the gradual exhaustion of system memory through the unfreed resources (NVD).

The vulnerability requires local access with low privileges to exploit. No known exploits have been reported in the wild, and the vulnerability is primarily a reliability issue rather than a security concern (NVD).

The vulnerability has been fixed in Linux kernel version 6.1.12 and later versions. The fix involves modifying the error handling path in the ice_add_adv_recipe() function to properly release resources when ice_add_special_words() fails. Users are advised to upgrade to a patched kernel version (Kernel Patch).