Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48844

Bluetooth: hci_core: Fix leaking sent_cmd skb

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix leaking sent_cmd skb sent_cmd memory is not freed before freeing hci_dev causing it to leak it contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 58ce6d5b271ab25fb2056f84a8e5546945eb5fc9 to < 3679ccc09d8806686d579095ed504e045af7f7d6affected
  • 58ce6d5b271ab25fb2056f84a8e5546945eb5fc9 to < 9473d06bd1c8da49eafb685aa95a290290c672ddaffected
  • 58ce6d5b271ab25fb2056f84a8e5546945eb5fc9 to < dd3b1dc3dd050f1f47cd13e300732852414270f8affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.30 to ≤ 5.15.*unaffected
  • 5.16.16 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References