CVE-2022-49809

net/x25: Fix skb leak in x25_lapb_receive_frame()

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 23, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net/x25: Fix skb leak in x25_lapb_receive_frame()

x25_lapb_receive_frame() using skb_copy() to get a private copy of skb, the new skb should be freed in the undersized/fragmented skb error handling path. Otherwise there is a memory leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before fda0ba7c84b46d10947c687320804b9de149a921Affected cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before dfcfbe4f2e4b2c81cff4e79b48502d97fda73118Affected cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before 0ef17d966445358a55c5f4ccf2c73cca3e39192bAffected cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before e109b41870db995cae25dfaf0cc3922f9028b1a1Affected cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before 9f00da9c866d506998bf0a3f699ec900730472daAffected cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before c8baf1fc248b2e88642f094fea9509a9bf98c5bbAffected cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before 2d675be16a461310d738d93f9f1a00da62055c5aAffected cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before 2929cceb2fcf0ded7182562e4888afafece82cceAffected 7f3ea0c12493c9ff38a13a89bcf08846b50c1f1cAffected 3.0.72 to before 3.1Affected
LinuxLinux	3.1Affected before 3.1Not affected 4.9.334 through 4.9.Not affected 4.14.300 through 4.14.Not affected 4.19.267 through 4.19.Not affected 5.4.225 through 5.4.Not affected 5.10.156 through 5.10.Not affected 5.15.80 through 5.15.Not affected 6.0.10 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before fda0ba7c84b46d10947c687320804b9de149a921Affected
cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before dfcfbe4f2e4b2c81cff4e79b48502d97fda73118Affected
cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before 0ef17d966445358a55c5f4ccf2c73cca3e39192bAffected
cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before e109b41870db995cae25dfaf0cc3922f9028b1a1Affected
cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before 9f00da9c866d506998bf0a3f699ec900730472daAffected
cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before c8baf1fc248b2e88642f094fea9509a9bf98c5bbAffected
cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before 2d675be16a461310d738d93f9f1a00da62055c5aAffected
cb101ed2c3c7c0224d16953fe77bfb9d6c2cb9df to before 2929cceb2fcf0ded7182562e4888afafece82cceAffected
7f3ea0c12493c9ff38a13a89bcf08846b50c1f1cAffected
3.0.72 to before 3.1Affected

LinuxLinux

3.1Affected
before 3.1Not affected
4.9.334 through 4.9.*Not affected
4.14.300 through 4.14.*Not affected
4.19.267 through 4.19.*Not affected
5.4.225 through 5.4.*Not affected
5.10.156 through 5.10.*Not affected
5.15.80 through 5.15.*Not affected
6.0.10 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.