CVE-2022-48844

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48844
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix leaking sent_cmd skb sent_cmd memory is not freed before freeing hci_dev causing it to leak it contents.

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3679ccc09d8806686d579095ed504e045af7f7d6 Patch
https://git.kernel.org/stable/c/9473d06bd1c8da49eafb685aa95a290290c672dd Patch
https://git.kernel.org/stable/c/dd3b1dc3dd050f1f47cd13e300732852414270f8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Jul 2024, 18:24

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-416
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/9473d06bd1c8da49eafb685aa95a290290c672dd - () https://git.kernel.org/stable/c/9473d06bd1c8da49eafb685aa95a290290c672dd - Patch
References () https://git.kernel.org/stable/c/dd3b1dc3dd050f1f47cd13e300732852414270f8 - () https://git.kernel.org/stable/c/dd3b1dc3dd050f1f47cd13e300732852414270f8 - Patch
References () https://git.kernel.org/stable/c/3679ccc09d8806686d579095ed504e045af7f7d6 - () https://git.kernel.org/stable/c/3679ccc09d8806686d579095ed504e045af7f7d6 - Patch

16 Jul 2024, 13:43

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-16 13:15

Updated : 2024-07-24 18:24

NVD link : CVE-2022-48844

Mitre link : CVE-2022-48844

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free