In the Linux kernel, the following vulnerability has been resolved:
can: mcan: mcantxhandler(): fix use after free of skb
canputechoskb() will clone skb then free the skb. Move the canputechoskb() for the m_can version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch.
[
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_tx_handler",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f43e64076ff1b1dcb893fb77ad1204105f710a29",
"digest": {
"function_hash": "247060238553558819706824952909160172686",
"length": 2343.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-4207db81"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7728d937ec403a1ceff9483023252d2cb8777f81",
"digest": {
"line_hashes": [
"35031618558979899263170154689837023110",
"11192590540522719042875980023183126220",
"199240488136992889476141500549904549516",
"151310668694973908518363832526840907838",
"30680163811397689291427575818408385937",
"338880013426277552173715871534874689963",
"28027170934783941478255768003408489427",
"307429846708298633943037055174450313796"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-47b7aa9f"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4db7d6f481990dd179a9ee7126dc7aa31ea4fff3",
"digest": {
"line_hashes": [
"248820739841421028284509462950772582291",
"28759207208343743578714387415745533259",
"160712166208886316962251891389736378885",
"59916548876537639872626751988850081109",
"55778982945023420607428449212385330844",
"215226341596356000324991760321063957486",
"41841596433944344983914689952762038321",
"150256807566372921218859475752975226289"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-4a16e6d5"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_tx_handler",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@869016a2938ac44f7b2fb7fc22c89edad99eb9b3",
"digest": {
"function_hash": "9449512065105631150758211423464260346",
"length": 2206.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-4b6d6bec"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d93ed9aff64968f4cdad690712eb4f48ae537bde",
"digest": {
"line_hashes": [
"196809201213838800853818439344150407091",
"247738505604048910173181774340206472761",
"199240488136992889476141500549904549516",
"151310668694973908518363832526840907838",
"30680163811397689291427575818408385937",
"338880013426277552173715871534874689963",
"261615775584327362208072447323301648845",
"92750408185045847336027372436208199802"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-4d7fca73"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08d90846e438ac22dc56fc49ec0b0d195831c5ed",
"digest": {
"line_hashes": [
"151683433794797018260272017239171769336",
"86305733882000817428106842299644246006",
"141312145520660616709069599430968333197",
"92222981877616265791195728593900194474",
"55778982945023420607428449212385330844",
"215226341596356000324991760321063957486",
"41841596433944344983914689952762038321",
"150256807566372921218859475752975226289"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-7366f592"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_start_xmit",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d93ed9aff64968f4cdad690712eb4f48ae537bde",
"digest": {
"function_hash": "86949480772746790066325717023736720612",
"length": 1215.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-837a26ec"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_tx_handler",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4db7d6f481990dd179a9ee7126dc7aa31ea4fff3",
"digest": {
"function_hash": "247060238553558819706824952909160172686",
"length": 2343.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-94851fbe"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31417073493f302d26ab66b3abc098d43227b835",
"digest": {
"line_hashes": [
"248820739841421028284509462950772582291",
"28759207208343743578714387415745533259",
"160712166208886316962251891389736378885",
"59916548876537639872626751988850081109",
"55778982945023420607428449212385330844",
"215226341596356000324991760321063957486",
"41841596433944344983914689952762038321",
"150256807566372921218859475752975226289"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-a98be534"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e8e79c416aae1de224c0f1860f2e3350fa171f8",
"digest": {
"line_hashes": [
"248820739841421028284509462950772582291",
"28759207208343743578714387415745533259",
"160712166208886316962251891389736378885",
"59916548876537639872626751988850081109",
"55778982945023420607428449212385330844",
"215226341596356000324991760321063957486",
"41841596433944344983914689952762038321",
"150256807566372921218859475752975226289"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-b55433eb"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f43e64076ff1b1dcb893fb77ad1204105f710a29",
"digest": {
"line_hashes": [
"248820739841421028284509462950772582291",
"28759207208343743578714387415745533259",
"160712166208886316962251891389736378885",
"59916548876537639872626751988850081109",
"55778982945023420607428449212385330844",
"215226341596356000324991760321063957486",
"41841596433944344983914689952762038321",
"150256807566372921218859475752975226289"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-b66989a1"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_start_xmit",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3892a747ab16b1eb6593a19d29f62c3b3f020ac",
"digest": {
"function_hash": "180390924352147125677734287503457079637",
"length": 2092.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-bd18b164"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_tx_handler",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e8e79c416aae1de224c0f1860f2e3350fa171f8",
"digest": {
"function_hash": "247060238553558819706824952909160172686",
"length": 2343.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-ccbcc887"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_tx_handler",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08d90846e438ac22dc56fc49ec0b0d195831c5ed",
"digest": {
"function_hash": "9449512065105631150758211423464260346",
"length": 2206.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-d8f9648e"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3892a747ab16b1eb6593a19d29f62c3b3f020ac",
"digest": {
"line_hashes": [
"35031618558979899263170154689837023110",
"11192590540522719042875980023183126220",
"199240488136992889476141500549904549516",
"151310668694973908518363832526840907838",
"30680163811397689291427575818408385937",
"338880013426277552173715871534874689963",
"28027170934783941478255768003408489427",
"307429846708298633943037055174450313796"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-e282a3be"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_start_xmit",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7728d937ec403a1ceff9483023252d2cb8777f81",
"digest": {
"function_hash": "180390924352147125677734287503457079637",
"length": 2092.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-f9fb6393"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@869016a2938ac44f7b2fb7fc22c89edad99eb9b3",
"digest": {
"line_hashes": [
"151683433794797018260272017239171769336",
"86305733882000817428106842299644246006",
"141312145520660616709069599430968333197",
"92222981877616265791195728593900194474",
"55778982945023420607428449212385330844",
"215226341596356000324991760321063957486",
"41841596433944344983914689952762038321",
"150256807566372921218859475752975226289"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49275-fd18a038"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "m_can_tx_handler",
"file": "drivers/net/can/m_can/m_can.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31417073493f302d26ab66b3abc098d43227b835",
"digest": {
"function_hash": "247060238553558819706824952909160172686",
"length": 2343.0
},
"signature_type": "Function",
"id": "CVE-2022-49275-fd2fc7f8"
}
]