CVE-2022-48959: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48959 is a memory leak vulnerability in the Linux kernel's network subsystem, specifically in the sja1105_setup_devlink_regions() function of the DSA (Distributed Switch Architecture) SJA1105 driver. The vulnerability was discovered and disclosed in 2024, affecting the Linux kernel's network stack (CVE Details).

The vulnerability occurs when dsa_devlink_region_create fails in sja1105_setup_devlink_regions(), where priv->regions is not properly released, leading to a memory leak. This issue was introduced by commit bf425b82059e which added the functionality to expose static config as devlink region. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Moderate) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (Red Hat).

The vulnerability primarily affects system availability through memory resource exhaustion. According to the CVSS metrics, while there is no impact on confidentiality or integrity, the vulnerability can have a high impact on system availability due to the memory leak (Red Hat).

The vulnerability requires local access with low complexity and low privileges to exploit. No user interaction is required for exploitation, as indicated by the CVSS metrics (Red Hat).

The vulnerability has been fixed in multiple Linux kernel versions. The fix involves properly freeing priv->regions when dsa_devlink_region_create fails. The patch has been backported to various stable kernel versions (Kernel Commit).