CVE-2022-49923

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() nxp_nci_send() will call nxp_nci_i2c_write(), and only free skb when nxp_nci_i2c_write() failed. However, even if the nxp_nci_i2c_write() run succeeds, the skb will not be freed in nxp_nci_i2c_write(). As the result, the skb will memleak. nxp_nci_send() should also free the skb when nxp_nci_i2c_write() succeeds.

Reserved 2025-05-01 | Published 2025-05-01 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

dece45855a8b0d1dcf48eb01d0822070ded6a4c8 before 9ae2c9a91ff068f4c3e392f47e8e26a1c9f85ebb
affected

dece45855a8b0d1dcf48eb01d0822070ded6a4c8 before 3cba1f061bfe23fece2841129ca2862cdec29d5c
affected

dece45855a8b0d1dcf48eb01d0822070ded6a4c8 before 3ecf0f4227029b2c42e036b10ff6e5d09e20821e
affected

dece45855a8b0d1dcf48eb01d0822070ded6a4c8 before 7bf1ed6aff0f70434bd0cdd45495e83f1dffb551
affected

Default status
affected

4.1
affected

Any version before 4.1
unaffected

5.10.154
unaffected

5.15.78
unaffected

6.0.8
unaffected

6.1
unaffected

References

git.kernel.org/...c/9ae2c9a91ff068f4c3e392f47e8e26a1c9f85ebb

git.kernel.org/...c/3cba1f061bfe23fece2841129ca2862cdec29d5c

git.kernel.org/...c/3ecf0f4227029b2c42e036b10ff6e5d09e20821e

git.kernel.org/...c/7bf1ed6aff0f70434bd0cdd45495e83f1dffb551

cve.org (CVE-2022-49923)

nvd.nist.gov (CVE-2022-49923)

Download JSON