Riskcovery

CVE-2022-49008

can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Aug 22, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down

In can327_feed_frame_to_netdev(), it did not free the skb when netdev is down, and all callers of can327_feed_frame_to_netdev() did not free allocated skb too. That would trigger skb leak.

Fix it by adding kfree_skb() in can327_feed_frame_to_netdev() when netdev is down. Not tested, just compiled.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 43da2f07622f41376c7ddab8f73dc2b1d3ab9715 to before 797b1d9fc0e1f4351e4ad49b078c1a3cdc0d4a08Affected
  • 43da2f07622f41376c7ddab8f73dc2b1d3ab9715 to before 8fa452cfafed521aaf5a18c71003fe24b1ee6141Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.0.12 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.