Riskcovery

CVE-2022-49924

nfc: fdp: Fix potential memory leak in fdp_nci_send()

State
Published
Severity
5.5 Medium
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: fdp: Fix potential memory leak in fdp_nci_send()

fdp_nci_send() will call fdp_nci_i2c_write that will not free skb in the function. As a result, when fdp_nci_i2c_write() finished, the skb will memleak. fdp_nci_send() should free skb after fdp_nci_i2c_write() finished.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • a06347c04c13e380afce0c9816df51f00b83faf1 to before e8c11ee2d07f7c4dfa2ac0ea8efc4f627e58ea57Affected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to before 44bc1868a4f542502ea2221fe5ad88ca66d1c6b6Affected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to before 1a7a898f8f7b56c0eaa2baf67a0c96235a30bc29Affected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to before 8e4aae6b8ca76afb1fb64dcb24be44ba814e7f8aAffected
LinuxLinux
  • 4.4Affected
  • before 4.4Not affected
  • 5.10.154 through 5.10.*Not affected
  • 5.15.78 through 5.15.*Not affected
  • 6.0.8 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.