CVE-2022-49923

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49923
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49923.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49923
Downstream
Related
Published
2025-05-01T14:11:02Z
Modified
2026-08-12T03:51:23Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
Details

In the Linux kernel, the following vulnerability has been resolved:

nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()

nxp_nci_send() will call nxp_nci_i2c_write(), and only free skb when nxp_nci_i2c_write() failed. However, even if the nxp_nci_i2c_write() run succeeds, the skb will not be freed in nxp_nci_i2c_write(). As the result, the skb will memleak. nxp_nci_send() should also free the skb when nxp_nci_i2c_write() succeeds.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49923.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dece45855a8b0d1dcf48eb01d0822070ded6a4c8
Fixed
9ae2c9a91ff068f4c3e392f47e8e26a1c9f85ebb
Fixed
3cba1f061bfe23fece2841129ca2862cdec29d5c
Fixed
3ecf0f4227029b2c42e036b10ff6e5d09e20821e
Fixed
7bf1ed6aff0f70434bd0cdd45495e83f1dffb551

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49923.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.0
Fixed
5.10.154
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.78
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49923.json"