{
  "cveId": "CVE-2022-48659",
  "url": "https://patchblox.com/security/cve/CVE-2022-48659",
  "summary": "CVE-2022-48659 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48659, released April 28, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/slub: fix to return errno if kmalloc() fails...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  mm/slub: fix to return errno if kmalloc() fails  In create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUG_ON();  kernel BUG at mm/slub.c:5893! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP  Call trace:  sysfs_slab_add\u002B0x258/0x260 mm/slub.c:5973  __kmem_cache_create\u002B0x60/0x118 mm/slub.c:4899  create_cache mm/slab_common.c:229 [inline]  kmem_cache_create_usercopy\u002B0x19c/0x31c mm/slab_common.c:335  kmem_cache_create\u002B0x1c/0x28 mm/slab_common.c:390  f2fs_kmem_cache_create fs/f2fs/f2fs.h:2766 [inline]  f2fs_init_xattr_caches\u002B0x78/0xb4 fs/f2fs/xattr.c:808  f2fs_fill_super\u002B0x1050/0x1e0c fs/f2fs/super.c:4149  mount_bdev\u002B0x1b8/0x210 fs/super.c:1400  f2fs_mount\u002B0x44/0x58 fs/f2fs/super.c:4512  legacy_get_tree\u002B0x30/0x74 fs/fs_context.c:610  vfs_get_tree\u002B0x40/0x140 fs/super.c:1530  do_new_mount\u002B0x1dc/0x4e4 fs/namespace.c:3040  path_mount\u002B0x358/0x914 fs/namespace.c:3370  do_mount fs/namespace.c:3383 [inline]  __do_sys_mount fs/namespace.c:3591 [inline]  __se_sys_mount fs/namespace.c:3568 [inline]  __arm64_sys_mount\u002B0x2f8/0x408 fs/namespace.c:3568",
  "published": "2024-04-28T13:15:07Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00241,
  "epssPercentile": 0.1535,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48659",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48659",
      "released": "2024-04-28T13:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48659",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48659",
      "released": "2024-04-28T13:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48659",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48659",
      "released": "2024-04-28T13:15:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}