Riskcovery

CVE-2022-49923

nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()

State
Published
Severity
5.5 Medium
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()

nxp_nci_send() will call nxp_nci_i2c_write(), and only free skb when nxp_nci_i2c_write() failed. However, even if the nxp_nci_i2c_write() run succeeds, the skb will not be freed in nxp_nci_i2c_write(). As the result, the skb will memleak. nxp_nci_send() should also free the skb when nxp_nci_i2c_write() succeeds.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • dece45855a8b0d1dcf48eb01d0822070ded6a4c8 to before 9ae2c9a91ff068f4c3e392f47e8e26a1c9f85ebbAffected
  • dece45855a8b0d1dcf48eb01d0822070ded6a4c8 to before 3cba1f061bfe23fece2841129ca2862cdec29d5cAffected
  • dece45855a8b0d1dcf48eb01d0822070ded6a4c8 to before 3ecf0f4227029b2c42e036b10ff6e5d09e20821eAffected
  • dece45855a8b0d1dcf48eb01d0822070ded6a4c8 to before 7bf1ed6aff0f70434bd0cdd45495e83f1dffb551Affected
LinuxLinux
  • 4.1Affected
  • before 4.1Not affected
  • 5.10.154 through 5.10.*Not affected
  • 5.15.78 through 5.15.*Not affected
  • 6.0.8 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.