CVE-2022-49922: nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
In the Linux kernel, the following vulnerability has been resolved:
nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cncisend()
nfcmrvli2cncisend() will be called by nfcmrvlncisend(), and skb should be freed in nfcmrvli2cncisend(). However, nfcmrvlncisend() will only free skb when i2cmastersend() return >=0, which means skb will memleak when i2cmastersend() failed. Free skb no matter whether i2cmastersend() succeeds.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49922?
CVE-2022-49922 has a medium severity level due to the potential memory leak in the Linux kernel.
How do I fix CVE-2022-49922?
To fix CVE-2022-49922, update the Linux kernel to the latest version that contains the patch for this vulnerability.
Which software versions are affected by CVE-2022-49922?
CVE-2022-49922 affects the Linux Kernel, but specific versions are not detailed in the vulnerability report.
What is the impact of CVE-2022-49922?
The impact of CVE-2022-49922 includes the potential for increased memory usage which can lead to performance degradation.
When was CVE-2022-49922 introduced in the Linux kernel?
CVE-2022-49922 was introduced in the Linux kernel before it was identified and resolved in the later updates.