{"id":"CVE-2022-49809","state":"PUBLISHED","title":"net/x25: Fix skb leak in x25_lapb_receive_frame()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/x25: Fix skb leak in x25_lapb_receive_frame()\n\nx25_lapb_receive_frame() using skb_copy() to get a private copy of\nskb, the new skb should be freed in the undersized/fragmented skb\nerror handling path. Otherwise there is a memory leak.","publishedAt":"2025-05-01T14:09:34.853Z","updatedAt":"2026-05-23T15:22:56.551Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"fda0ba7c84b46d10947c687320804b9de149a921","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"dfcfbe4f2e4b2c81cff4e79b48502d97fda73118","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"0ef17d966445358a55c5f4ccf2c73cca3e39192b","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"e109b41870db995cae25dfaf0cc3922f9028b1a1","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"9f00da9c866d506998bf0a3f699ec900730472da","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"c8baf1fc248b2e88642f094fea9509a9bf98c5bb","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"2d675be16a461310d738d93f9f1a00da62055c5a","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"2929cceb2fcf0ded7182562e4888afafece82cce","versionType":"git"},{"version":"7f3ea0c12493c9ff38a13a89bcf08846b50c1f1c","status":"affected","versionType":"git"},{"version":"3.0.72","status":"affected","lessThan":"3.1","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/x25/x25_dev.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.1","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.1","versionType":"semver"},{"version":"4.9.334","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.300","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.267","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.225","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.156","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.80","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.10","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/x25/x25_dev.c"]}],"references":["https://git.kernel.org/stable/c/fda0ba7c84b46d10947c687320804b9de149a921","https://git.kernel.org/stable/c/dfcfbe4f2e4b2c81cff4e79b48502d97fda73118","https://git.kernel.org/stable/c/0ef17d966445358a55c5f4ccf2c73cca3e39192b","https://git.kernel.org/stable/c/e109b41870db995cae25dfaf0cc3922f9028b1a1","https://git.kernel.org/stable/c/9f00da9c866d506998bf0a3f699ec900730472da","https://git.kernel.org/stable/c/c8baf1fc248b2e88642f094fea9509a9bf98c5bb","https://git.kernel.org/stable/c/2d675be16a461310d738d93f9f1a00da62055c5a","https://git.kernel.org/stable/c/2929cceb2fcf0ded7182562e4888afafece82cce"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/49xxx/CVE-2022-49809.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-49809","state":"PUBLISHED","datePublished":"2025-05-01T14:09:34.853Z","dateUpdated":"2026-05-23T15:22:56.551Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-05-01T14:05:17.226Z"},"containers":{"cna":{"title":"net/x25: Fix skb leak in x25_lapb_receive_frame()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/x25: Fix skb leak in x25_lapb_receive_frame()\n\nx25_lapb_receive_frame() using skb_copy() to get a private copy of\nskb, the new skb should be freed in the undersized/fragmented skb\nerror handling path. Otherwise there is a memory leak."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"fda0ba7c84b46d10947c687320804b9de149a921","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"dfcfbe4f2e4b2c81cff4e79b48502d97fda73118","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"0ef17d966445358a55c5f4ccf2c73cca3e39192b","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"e109b41870db995cae25dfaf0cc3922f9028b1a1","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"9f00da9c866d506998bf0a3f699ec900730472da","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"c8baf1fc248b2e88642f094fea9509a9bf98c5bb","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"2d675be16a461310d738d93f9f1a00da62055c5a","versionType":"git"},{"version":"cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df","status":"affected","lessThan":"2929cceb2fcf0ded7182562e4888afafece82cce","versionType":"git"},{"version":"7f3ea0c12493c9ff38a13a89bcf08846b50c1f1c","status":"affected","versionType":"git"},{"version":"3.0.72","status":"affected","lessThan":"3.1","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/x25/x25_dev.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.1","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.1","versionType":"semver"},{"version":"4.9.334","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.300","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.267","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.225","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.156","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.80","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.10","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/x25/x25_dev.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/fda0ba7c84b46d10947c687320804b9de149a921"},{"url":"https://git.kernel.org/stable/c/dfcfbe4f2e4b2c81cff4e79b48502d97fda73118"},{"url":"https://git.kernel.org/stable/c/0ef17d966445358a55c5f4ccf2c73cca3e39192b"},{"url":"https://git.kernel.org/stable/c/e109b41870db995cae25dfaf0cc3922f9028b1a1"},{"url":"https://git.kernel.org/stable/c/9f00da9c866d506998bf0a3f699ec900730472da"},{"url":"https://git.kernel.org/stable/c/c8baf1fc248b2e88642f094fea9509a9bf98c5bb"},{"url":"https://git.kernel.org/stable/c/2d675be16a461310d738d93f9f1a00da62055c5a"},{"url":"https://git.kernel.org/stable/c/2929cceb2fcf0ded7182562e4888afafece82cce"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-23T15:22:56.551Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"4.9.334"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"4.14.300"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"4.19.267"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"5.4.225"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"5.10.156"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"5.15.80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"6.0.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"6.1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.72"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}