VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 21, 2024· Updated Jun 17, 2026

CVE-2022-49008

CVE-2022-49008

Description

In the Linux kernel, the following vulnerability has been resolved:

can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down

In can327_feed_frame_to_netdev(), it did not free the skb when netdev is down, and all callers of can327_feed_frame_to_netdev() did not free allocated skb too. That would trigger skb leak.

Fix it by adding kfree_skb() in can327_feed_frame_to_netdev() when netdev is down. Not tested, just compiled.

Affected products

11
  • Linux/Kernelllm-fuzzy10 versions
    (expand)+ 9 more
    • (no CPE)
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.0,<6.0.12
    • cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
    • (no CPE)range: 6.0
  • osv-coords
    pkg:linux/kernel
    Range: >= 6.0.0, < 6.0.12

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.