In the Linux kernel, the following vulnerability has been resolved:
net/x25: Fix skb leak in x25lapbreceive_frame()
x25lapbreceiveframe() using skbcopy() to get a private copy of skb, the new skb should be freed in the undersized/fragmented skb error handling path. Otherwise there is a memory leak.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49809.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49809.json"
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"173046157690723886372678870579719930349",
"129233413283505257514201221319420499602",
"46108541882562944588219980628551593114",
"115581070340383682028006270186219375659"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49809-04d33f7d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0ef17d966445358a55c5f4ccf2c73cca3e39192b",
"target": {
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 785.0,
"function_hash": "146308327612710268307885105952996906718"
},
"signature_type": "Function",
"id": "CVE-2022-49809-224e12d5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2d675be16a461310d738d93f9f1a00da62055c5a",
"target": {
"function": "x25_lapb_receive_frame",
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"173046157690723886372678870579719930349",
"129233413283505257514201221319420499602",
"46108541882562944588219980628551593114",
"115581070340383682028006270186219375659"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49809-22dc95ac",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fda0ba7c84b46d10947c687320804b9de149a921",
"target": {
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"173046157690723886372678870579719930349",
"129233413283505257514201221319420499602",
"46108541882562944588219980628551593114",
"115581070340383682028006270186219375659"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49809-3666bc60",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dfcfbe4f2e4b2c81cff4e79b48502d97fda73118",
"target": {
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 785.0,
"function_hash": "146308327612710268307885105952996906718"
},
"signature_type": "Function",
"id": "CVE-2022-49809-4dd26ccb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dfcfbe4f2e4b2c81cff4e79b48502d97fda73118",
"target": {
"function": "x25_lapb_receive_frame",
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"173046157690723886372678870579719930349",
"129233413283505257514201221319420499602",
"46108541882562944588219980628551593114",
"115581070340383682028006270186219375659"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49809-58f4b98d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8baf1fc248b2e88642f094fea9509a9bf98c5bb",
"target": {
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 785.0,
"function_hash": "146308327612710268307885105952996906718"
},
"signature_type": "Function",
"id": "CVE-2022-49809-5c4eed2b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0ef17d966445358a55c5f4ccf2c73cca3e39192b",
"target": {
"function": "x25_lapb_receive_frame",
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 785.0,
"function_hash": "146308327612710268307885105952996906718"
},
"signature_type": "Function",
"id": "CVE-2022-49809-5ec63da8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e109b41870db995cae25dfaf0cc3922f9028b1a1",
"target": {
"function": "x25_lapb_receive_frame",
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 785.0,
"function_hash": "146308327612710268307885105952996906718"
},
"signature_type": "Function",
"id": "CVE-2022-49809-691a7b47",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8baf1fc248b2e88642f094fea9509a9bf98c5bb",
"target": {
"function": "x25_lapb_receive_frame",
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 785.0,
"function_hash": "146308327612710268307885105952996906718"
},
"signature_type": "Function",
"id": "CVE-2022-49809-a52f0dcd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f00da9c866d506998bf0a3f699ec900730472da",
"target": {
"function": "x25_lapb_receive_frame",
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"173046157690723886372678870579719930349",
"129233413283505257514201221319420499602",
"46108541882562944588219980628551593114",
"115581070340383682028006270186219375659"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49809-b0f56dfd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2929cceb2fcf0ded7182562e4888afafece82cce",
"target": {
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 785.0,
"function_hash": "146308327612710268307885105952996906718"
},
"signature_type": "Function",
"id": "CVE-2022-49809-b4e480d3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fda0ba7c84b46d10947c687320804b9de149a921",
"target": {
"function": "x25_lapb_receive_frame",
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 785.0,
"function_hash": "146308327612710268307885105952996906718"
},
"signature_type": "Function",
"id": "CVE-2022-49809-b4f8d4c7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2929cceb2fcf0ded7182562e4888afafece82cce",
"target": {
"function": "x25_lapb_receive_frame",
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"173046157690723886372678870579719930349",
"129233413283505257514201221319420499602",
"46108541882562944588219980628551593114",
"115581070340383682028006270186219375659"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49809-da7871a4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f00da9c866d506998bf0a3f699ec900730472da",
"target": {
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"173046157690723886372678870579719930349",
"129233413283505257514201221319420499602",
"46108541882562944588219980628551593114",
"115581070340383682028006270186219375659"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49809-e97fa7b3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2d675be16a461310d738d93f9f1a00da62055c5a",
"target": {
"file": "net/x25/x25_dev.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"173046157690723886372678870579719930349",
"129233413283505257514201221319420499602",
"46108541882562944588219980628551593114",
"115581070340383682028006270186219375659"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2022-49809-f111056f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e109b41870db995cae25dfaf0cc3922f9028b1a1",
"target": {
"file": "net/x25/x25_dev.c"
}
}
]