CVE-2022-49369

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49369
In the Linux kernel, the following vulnerability has been resolved: amt: fix possible memory leak in amt_rcv() If an amt receives packets and it finds socket. If it can't find a socket, it should free a received skb. But it doesn't. So, a memory leak would possibly occur.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1a1a0e80e005cbdc2c250fc858e1d8570f4e4acb Patch
https://git.kernel.org/stable/c/4b8032d39b276c52db57ff834c300405b9da2691 Patch
https://git.kernel.org/stable/c/60d9c020c69977e138727b3577bc6a0458325e9c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Apr 2025, 20:42

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: amt: se corrige una posible pérdida de memoria en amt_rcv() Si un amt recibe paquetes y encuentra un socket, si no puede encontrar un socket, debería liberar un skb recibido, pero no lo hace, por lo que es posible que se produzca una pérdida de memoria.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/1a1a0e80e005cbdc2c250fc858e1d8570f4e4acb - () https://git.kernel.org/stable/c/1a1a0e80e005cbdc2c250fc858e1d8570f4e4acb - Patch
References () https://git.kernel.org/stable/c/4b8032d39b276c52db57ff834c300405b9da2691 - () https://git.kernel.org/stable/c/4b8032d39b276c52db57ff834c300405b9da2691 - Patch
References () https://git.kernel.org/stable/c/60d9c020c69977e138727b3577bc6a0458325e9c - () https://git.kernel.org/stable/c/60d9c020c69977e138727b3577bc6a0458325e9c - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-04-14 20:42

NVD link : CVE-2022-49369

Mitre link : CVE-2022-49369

CVE.ORG link : CVE-2022-49369

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime