NetSight
medium5.5

CVE-2022-48722

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_xmit_complete() helpe…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_xmit_complete() helper is not called. Only ieee802154_wake_queue() is called manually. We then leak the skb structure. Free the skb structure upon error before returning.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.12 before 4.14.265
from 4.15 before 4.19.228
from 4.20 before 5.4.178
from 5.5 before 5.10.99
from 5.11 before 5.15.22
from 5.16 before 5.16.8

Weakness classification

References