CVE-2022-48794

MEDIUM EPSS 14.9%
Published Jul 16, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jul 16, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: at86rf230: Stop leaking skb's Upon error the ieee802154_xmit_complete() helper is not called. Only ieee802154_wake_queue() is called manually. In the Tx case we then leak the skb structure. Free the skb structure upon error before returning when appropriate. As the 'is_tx = 0' cannot be moved in the complete handler because of a possible race between the delay in switching to STATE_RX_AACK_ON and a new interrupt, we introduce an intermediate 'was_tx' boolean just for this purpose. There is no Fixes tag applying here, many changes have been made on this area and the issue kind of always existed.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
14.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel* <4.9.303
linuxlinux_kernel*≥4.10  –  <4.14.268
linuxlinux_kernel*≥4.15  –  <4.19.231
linuxlinux_kernel*≥4.20  –  <5.4.181
linuxlinux_kernel*≥5.5  –  <5.10.102
linuxlinux_kernel*≥5.11  –  <5.15.25
linuxlinux_kernel*≥5.16  –  <5.16.11
linuxlinux_kernel5.17any
linuxlinux_kernel5.17any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/0fd484644c68897c490a3307bfcc8bf767df5a43
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1c72f04d52b7200bb83426a9bed378668271ea4a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/23b2a25382400168427ea278f3d8bf4ecfd333bf
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/455ef08d6e5473526fa6763f75a93f7198206966
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6312f6a53fd3ea38125dcaca5e3c9aa7d8a60cf7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/af649e5c95f56df64363bc46f6746b87819f9c0d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d2a1eaf51b7d4412319adb6acef114ba472d1692
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e5ce576d45bf72fd0e3dc37eff897bfcc488f6a9
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0fd484644c68897c490a3307bfcc8bf767df5a43
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1c72f04d52b7200bb83426a9bed378668271ea4a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/23b2a25382400168427ea278f3d8bf4ecfd333bf
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/455ef08d6e5473526fa6763f75a93f7198206966
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6312f6a53fd3ea38125dcaca5e3c9aa7d8a60cf7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/af649e5c95f56df64363bc46f6746b87819f9c0d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d2a1eaf51b7d4412319adb6acef114ba472d1692
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e5ce576d45bf72fd0e3dc37eff897bfcc488f6a9
    Patch