CVE-2022-48968: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48968 is a vulnerability in the Linux kernel's octeontx2-pf module, specifically in the otx2inittc() function. The vulnerability was discovered and disclosed in 2024, affecting the Linux kernel's memory management system. The issue occurs when rhashtable_init() fails, leading to an improper error handling condition (CVE Details).

The vulnerability exists in the otx2inittc() function where if rhashtableinit() fails, it does not properly free tc->tcentriesbitmap which is allocated in otx2tcallocent_bitmap(). This technical issue was identified and fixed in the Linux kernel through a patch that properly handles the memory deallocation in error cases (Kernel Patch). The vulnerability has been assigned a CVSS v3 score of 5.5, indicating a medium severity level (Red Hat).

The vulnerability can result in a memory leak in the system, potentially impacting system performance and possibly leading to a denial of service condition. The impact is primarily focused on system resource management and availability (Red Hat).

The vulnerability has been patched in the Linux kernel. Red Hat Enterprise Linux 8 is not affected as the module is not built in this version, and RHEL 9 already includes the fix. The patch involves proper memory deallocation in case of initialization failure (Red Hat).