CVE-2022-49331

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49331
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling Error paths do not free previously allocated memory. Add devm_kfree() to those failure paths.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3eca2c42daa4659965db6817479027cbc6df7899 Patch
https://git.kernel.org/stable/c/54423649bc0ed464b75807a7cf2857a5871f738f Patch
https://git.kernel.org/stable/c/55904086041ba4ee4070187b36590f8f8d6df4cd Patch
https://git.kernel.org/stable/c/593773088d615a46a42c97e01a0550d192bb7f74 Patch
https://git.kernel.org/stable/c/6fce324b530dd74750ad870699e33eeed1029ded Patch
https://git.kernel.org/stable/c/996419e0594abb311fb958553809f24f38e7abbe Patch
https://git.kernel.org/stable/c/d221ce54ce331c1a23be71eebf57f6a088632383 Patch
https://git.kernel.org/stable/c/db836b97464d44340b568e041fd24602858713f7 Patch
https://git.kernel.org/stable/c/f444ecd3f57f4ba5090fe8b6756933e37de4226e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
History

13 Mar 2025, 21:51

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nfc: st21nfca: se corrigen las fugas de memoria en la gestión de EVT_TRANSACTION. Las rutas de error no liberan la memoria asignada previamente. Agregue devm_kfree() a esas rutas de error.
References () https://git.kernel.org/stable/c/3eca2c42daa4659965db6817479027cbc6df7899 - () https://git.kernel.org/stable/c/3eca2c42daa4659965db6817479027cbc6df7899 - Patch
References () https://git.kernel.org/stable/c/54423649bc0ed464b75807a7cf2857a5871f738f - () https://git.kernel.org/stable/c/54423649bc0ed464b75807a7cf2857a5871f738f - Patch
References () https://git.kernel.org/stable/c/55904086041ba4ee4070187b36590f8f8d6df4cd - () https://git.kernel.org/stable/c/55904086041ba4ee4070187b36590f8f8d6df4cd - Patch
References () https://git.kernel.org/stable/c/593773088d615a46a42c97e01a0550d192bb7f74 - () https://git.kernel.org/stable/c/593773088d615a46a42c97e01a0550d192bb7f74 - Patch
References () https://git.kernel.org/stable/c/6fce324b530dd74750ad870699e33eeed1029ded - () https://git.kernel.org/stable/c/6fce324b530dd74750ad870699e33eeed1029ded - Patch
References () https://git.kernel.org/stable/c/996419e0594abb311fb958553809f24f38e7abbe - () https://git.kernel.org/stable/c/996419e0594abb311fb958553809f24f38e7abbe - Patch
References () https://git.kernel.org/stable/c/d221ce54ce331c1a23be71eebf57f6a088632383 - () https://git.kernel.org/stable/c/d221ce54ce331c1a23be71eebf57f6a088632383 - Patch
References () https://git.kernel.org/stable/c/db836b97464d44340b568e041fd24602858713f7 - () https://git.kernel.org/stable/c/db836b97464d44340b568e041fd24602858713f7 - Patch
References () https://git.kernel.org/stable/c/f444ecd3f57f4ba5090fe8b6756933e37de4226e - () https://git.kernel.org/stable/c/f444ecd3f57f4ba5090fe8b6756933e37de4226e - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-13 21:51

NVD link : CVE-2022-49331

Mitre link : CVE-2022-49331

CVE.ORG link : CVE-2022-49331

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime