Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-49008

can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down In can327_feed_frame_to_netdev(), it did not free the skb when netdev is down, and all callers of can327_feed_frame_to_netdev() did not free allocated skb too. That would trigger skb leak. Fix it by adding kfree_skb() in can327_feed_frame_to_netdev() when netdev is down. Not tested, just compiled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 43da2f07622f41376c7ddab8f73dc2b1d3ab9715 to < 797b1d9fc0e1f4351e4ad49b078c1a3cdc0d4a08affected
  • 43da2f07622f41376c7ddab8f73dc2b1d3ab9715 to < 8fa452cfafed521aaf5a18c71003fe24b1ee6141affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.0.12 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References