ZeroHour

CVE-2022-50854

CVSS
EPSS
<1%p9
Published
()
Modified
Description

In the Linux kernel, the following vulnerability has been resolved: nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() skb should be free in virtual_nci_send(), otherwise kmemleak will report memleak. Steps for reproduction (simulated in qemu): cd tools/testing/selftests/nci make ./nci_dev BUG: memory leak unreferenced object 0xffff888107588000 (size 208): comm "nci_dev", pid 206, jiffies 4294945376 (age 368.248s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [ ] __alloc_skb+0x1da/0x290 [ ] nci_send_cmd+0xa3/0x350 [ ] nci_reset_req+0x6b/0xa0 [ ] __nci_request+0x90/0x250 [ ] nci_dev_up+0x217/0x5b0 [ ] nfc_dev_up+0x114/0x220 [ ] nfc_genl_dev_up+0x94/0xe0 [ ] genl_family_rcv_msg_doit.isra.14+0x228/0x2d0 [ ] genl_rcv_msg+0x35c/0x640 [ ] netlink_rcv_skb+0x11e/0x350 [ ] genl_rcv+0x24/0x40 [ ] netlink_unicast+0x43f/0x640 [ ] netlink_sendmsg+0x73a/0xbf0 [ ] __sys_sendto+0x324/0x370 [ ] __x64_sys_sendto+0xdd/0x1b0 [ ] do_syscall_64+0x3f/0x90

In the news

No ingested article mentions this CVE yet.