CVE-2022-49809: net/x25: Fix skb leak in x25_lapb_receive_frame()
In the Linux kernel, the following vulnerability has been resolved:
net/x25: Fix skb leak in x25lapbreceiveframe()
x25lapbreceiveframe() using skbcopy() to get a private copy of skb, the new skb should be freed in the undersized/fragmented skb error handling path. Otherwise there is a memory leak.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-49809?
CVE-2022-49809 is a vulnerability in the Linux kernel that results in a socket buffer (skb) memory leak in the x25_lapb_receive_frame() function.
What are the affected versions for CVE-2022-49809?
CVE-2022-49809 affects multiple versions of the Linux kernel from 3.0.72 up to 6.1-rc5.
How do I fix CVE-2022-49809?
To mitigate CVE-2022-49809, upgrade your Linux kernel to a version that includes the patch for this vulnerability.
What is the severity of CVE-2022-49809?
CVE-2022-49809 is classified as a moderate severity vulnerability due to the potential impact of memory leaks.
What could happen if CVE-2022-49809 is exploited?
Exploitation of CVE-2022-49809 could lead to increased memory use and potentially degrade system performance or stability.