In the Linux kernel, the following vulnerability has been resolved:
net: ieee802154: ca8210: Stop leaking skb's
Upon error the ieee802154xmitcomplete() helper is not called. Only ieee802154wakequeue() is called manually. We then leak the skb structure.
Free the skb structure upon error before returning.
[
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@621b24b09eb61c63f262da0c9c5f0e93348897e5",
"id": "CVE-2022-48722-02ddeac4",
"signature_version": "v1",
"target": {
"function": "ca8210_async_xmit_complete",
"file": "drivers/net/ieee802154/ca8210.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "167144803641667878292603399653697958289",
"length": 607.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21feb6df3967541931242c427fe0958276af81cc",
"id": "CVE-2022-48722-16eab930",
"signature_version": "v1",
"target": {
"file": "drivers/net/ieee802154/ca8210.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"97954433979373439563662669753516740962",
"50542518621803290382208126465863461301",
"66363238069649797432578683802656425861",
"244896767524834788618074195252461229275"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@621b24b09eb61c63f262da0c9c5f0e93348897e5",
"id": "CVE-2022-48722-17a6113c",
"signature_version": "v1",
"target": {
"file": "drivers/net/ieee802154/ca8210.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"97954433979373439563662669753516740962",
"50542518621803290382208126465863461301",
"66363238069649797432578683802656425861",
"244896767524834788618074195252461229275"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f38d3a6ec11c2733b1c641a46a2a2ecec57be08",
"id": "CVE-2022-48722-194439ae",
"signature_version": "v1",
"target": {
"file": "drivers/net/ieee802154/ca8210.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"97954433979373439563662669753516740962",
"50542518621803290382208126465863461301",
"66363238069649797432578683802656425861",
"244896767524834788618074195252461229275"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21feb6df3967541931242c427fe0958276af81cc",
"id": "CVE-2022-48722-45bf6ab0",
"signature_version": "v1",
"target": {
"function": "ca8210_async_xmit_complete",
"file": "drivers/net/ieee802154/ca8210.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "167144803641667878292603399653697958289",
"length": 607.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f38d3a6ec11c2733b1c641a46a2a2ecec57be08",
"id": "CVE-2022-48722-4dd11947",
"signature_version": "v1",
"target": {
"function": "ca8210_async_xmit_complete",
"file": "drivers/net/ieee802154/ca8210.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "167144803641667878292603399653697958289",
"length": 607.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78b3f20c17cbcb7645bfa63f2ca0e11b53c09d56",
"id": "CVE-2022-48722-b58eb16b",
"signature_version": "v1",
"target": {
"file": "drivers/net/ieee802154/ca8210.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"97954433979373439563662669753516740962",
"50542518621803290382208126465863461301",
"66363238069649797432578683802656425861",
"244896767524834788618074195252461229275"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78b3f20c17cbcb7645bfa63f2ca0e11b53c09d56",
"id": "CVE-2022-48722-d00a8701",
"signature_version": "v1",
"target": {
"function": "ca8210_async_xmit_complete",
"file": "drivers/net/ieee802154/ca8210.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "167144803641667878292603399653697958289",
"length": 607.0
}
}
]