In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcicore: Fix leaking sentcmd skb
sentcmd memory is not freed before freeing hcidev causing it to leak it contents.
[
{
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48844-4f95eca8",
"digest": {
"line_hashes": [
"223702392381093982727326718695889451804",
"15873962000824664311731710826560735394",
"274482330685173396209683909074826104567",
"1706187861667704586412554991053177557"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9473d06bd1c8da49eafb685aa95a290290c672dd",
"signature_type": "Line",
"target": {
"file": "net/bluetooth/hci_core.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48844-5bcc5b41",
"digest": {
"function_hash": "76032938721023477762563259128400690597",
"length": 680.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9473d06bd1c8da49eafb685aa95a290290c672dd",
"signature_type": "Function",
"target": {
"function": "hci_release_dev",
"file": "net/bluetooth/hci_core.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48844-8f6bd2f2",
"digest": {
"line_hashes": [
"223702392381093982727326718695889451804",
"15873962000824664311731710826560735394",
"274482330685173396209683909074826104567",
"1706187861667704586412554991053177557"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd3b1dc3dd050f1f47cd13e300732852414270f8",
"signature_type": "Line",
"target": {
"file": "net/bluetooth/hci_core.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48844-9cbd096e",
"digest": {
"function_hash": "76032938721023477762563259128400690597",
"length": 680.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3679ccc09d8806686d579095ed504e045af7f7d6",
"signature_type": "Function",
"target": {
"function": "hci_release_dev",
"file": "net/bluetooth/hci_core.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48844-f2913ad3",
"digest": {
"function_hash": "76032938721023477762563259128400690597",
"length": 680.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd3b1dc3dd050f1f47cd13e300732852414270f8",
"signature_type": "Function",
"target": {
"function": "hci_release_dev",
"file": "net/bluetooth/hci_core.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-48844-f4792be2",
"digest": {
"line_hashes": [
"223702392381093982727326718695889451804",
"15873962000824664311731710826560735394",
"274482330685173396209683909074826104567",
"1706187861667704586412554991053177557"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3679ccc09d8806686d579095ed504e045af7f7d6",
"signature_type": "Line",
"target": {
"file": "net/bluetooth/hci_core.c"
}
}
]