{"id":"DEBIAN-CVE-2022-48659","details":"In the Linux kernel, the following vulnerability has been resolved:  mm/slub: fix to return errno if kmalloc() fails  In create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUG_ON();  kernel BUG at mm/slub.c:5893! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP  Call trace:  sysfs_slab_add+0x258/0x260 mm/slub.c:5973  __kmem_cache_create+0x60/0x118 mm/slub.c:4899  create_cache mm/slab_common.c:229 [inline]  kmem_cache_create_usercopy+0x19c/0x31c mm/slab_common.c:335  kmem_cache_create+0x1c/0x28 mm/slab_common.c:390  f2fs_kmem_cache_create fs/f2fs/f2fs.h:2766 [inline]  f2fs_init_xattr_caches+0x78/0xb4 fs/f2fs/xattr.c:808  f2fs_fill_super+0x1050/0x1e0c fs/f2fs/super.c:4149  mount_bdev+0x1b8/0x210 fs/super.c:1400  f2fs_mount+0x44/0x58 fs/f2fs/super.c:4512  legacy_get_tree+0x30/0x74 fs/fs_context.c:610  vfs_get_tree+0x40/0x140 fs/super.c:1530  do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040  path_mount+0x358/0x914 fs/namespace.c:3370  do_mount fs/namespace.c:3383 [inline]  __do_sys_mount fs/namespace.c:3591 [inline]  __se_sys_mount fs/namespace.c:3568 [inline]  __arm64_sys_mount+0x2f8/0x408 fs/namespace.c:3568","modified":"2026-09-01T16:05:28.678620482Z","published":"2024-04-28T13:15:07.800Z","upstream":["CVE-2022-48659"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-48659"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-48659.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-48659.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-48659.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}