CVE-2022-48860: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48860 is a memory management vulnerability in the Linux kernel's ethernet driver, specifically in the xemaclite_of_probe function. The vulnerability was discovered and disclosed on July 16, 2024, affecting Linux kernel versions from 2.6.34 up to versions before 4.9.307, 4.14.272, 4.19.235, 5.4.185, 5.10.106, 5.15.29, and 5.16.15 (NVD).

The vulnerability stems from improper memory management in the xemaclite_of_probe function of the Linux kernel's ethernet driver. Specifically, a node pointer returned by of_parse_phandle() maintains an incremented refcount within the function, leading to a potential memory leak. The issue is classified as CWE-401 (Missing Release of Memory after Effective Lifetime) with a CVSS v3.1 base score of 5.5 (Medium), having a vector string of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can result in memory leaks in the Linux kernel's ethernet driver, potentially leading to resource exhaustion and system instability. The CVSS scoring indicates that while the vulnerability requires local access and cannot compromise system confidentiality or integrity, it can have a high impact on system availability (NVD).

The vulnerability requires local access with low attack complexity and low privileges to exploit. No user interaction is needed for exploitation. There are no known reports of this vulnerability being exploited in the wild (NVD).

The vulnerability has been patched by adding a call to of_node_put() to properly release the reference count, similar to how it's handled in the remove function. The fix has been implemented across multiple kernel versions through various patches (Kernel Patch).