CVE-2022-49369

Summary

In the Linux kernel, the following vulnerability has been resolved:

amt: fix possible memory leak in amt_rcv()

If an amt receives packets and it finds socket. If it can't find a socket, it should free a received skb. But it doesn't. So, a memory leak would possibly occur.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxcbc21dc1cfe949e37b2a54c71511579f1899e8d4 < 60d9c020c69977e138727b3577bc6a0458325e9caffected
LinuxLinuxcbc21dc1cfe949e37b2a54c71511579f1899e8d4 < 4b8032d39b276c52db57ff834c300405b9da2691affected
LinuxLinuxcbc21dc1cfe949e37b2a54c71511579f1899e8d4 < 1a1a0e80e005cbdc2c250fc858e1d8570f4e4acbaffected
LinuxLinux5.16affected
LinuxLinux0 < 5.16unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References