Riskcovery

CVE-2022-48844

Bluetooth: hci_core: Fix leaking sent_cmd skb

State
Published
Severity
Not scored
Published
Jul 16, 2024
Updated
May 11, 2026
Reserved
Jul 16, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_core: Fix leaking sent_cmd skb

sent_cmd memory is not freed before freeing hci_dev causing it to leak it contents.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 58ce6d5b271ab25fb2056f84a8e5546945eb5fc9 to before 3679ccc09d8806686d579095ed504e045af7f7d6Affected
  • 58ce6d5b271ab25fb2056f84a8e5546945eb5fc9 to before 9473d06bd1c8da49eafb685aa95a290290c672ddAffected
  • 58ce6d5b271ab25fb2056f84a8e5546945eb5fc9 to before dd3b1dc3dd050f1f47cd13e300732852414270f8Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.30 through 5.15.*Not affected
  • 5.16.16 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.