CVE-2022-49923: nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
In the Linux kernel, the following vulnerability has been resolved:
nfc: nxp-nci: Fix potential memory leak in nxpncisend()
nxpncisend() will call nxpncii2cwrite(), and only free skb when nxpncii2cwrite() failed. However, even if the nxpncii2cwrite() run succeeds, the skb will not be freed in nxpncii2cwrite(). As the result, the skb will memleak. nxpncisend() should also free the skb when nxpncii2cwrite() succeeds.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49923?
CVE-2022-49923 has a medium severity rating due to the potential memory leak in the Linux kernel.
How do I fix CVE-2022-49923?
To fix CVE-2022-49923, update your Linux kernel to a version that includes the patch addressing this vulnerability.
What vulnerabilities does CVE-2022-49923 address in the Linux kernel?
CVE-2022-49923 addresses a potential memory leak issue in the nxp_nci_send() function of the Linux kernel.
Which Linux kernel versions are affected by CVE-2022-49923?
CVE-2022-49923 affects specific versions of the Linux kernel that use the nxp_nci driver software.
Is CVE-2022-49923 being actively exploited in the wild?
As of now, there are no confirmed reports of CVE-2022-49923 being actively exploited in the wild.