CVE-2022-48844 - Bluetooth: hci_core: Fix leaking sent_cmd skb

MEDIUM

Bluetooth: hci_core: Fix leaking sent_cmd skb

Published Jul 16, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.22%

sent_cmd memory is not freed before freeing hci_dev causing it to leak it contents.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Will not fix	n/a
Red Hat Enterprise Linux 8	kernel-rt	Will not fix	n/a
Red Hat Enterprise Linux 9	kernel	Will not fix	n/a
Red Hat Enterprise Linux 9	kernel-rt	Will not fix	n/a

No remediation recorded yet.

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-416

Use After Free

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48844		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2298185		Issue Tracking
https://git.kernel.org/stable/c/3679ccc09d8806686d579095ed504e045af7f7d6		Patch
https://git.kernel.org/stable/c/9473d06bd1c8da49eafb685aa95a290290c672dd		Patch
https://git.kernel.org/stable/c/dd3b1dc3dd050f1f47cd13e300732852414270f8		Patch
https://lore.kernel.org/linux-cve-announce/2024071623-CVE-2022-48844-cc1f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48844
https://www.cve.org/CVERecord?id=CVE-2022-48844