amt: fix memory leak for advertisement message
Published Feb 26, 2025
5.5
MEDIUMCVSS 3.1
EPSS 0.26%
Description
When a gateway receives an advertisement message, it extracts relay information and then it should be freed. But the advertisement handler doesn't free it. So, memory leak would occur.
Affected products
-
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version
-
- Version 5.16StatusaffectedConstraints-
- Version 0StatusunaffectedConstraints<5.16
- Version 5.17.14StatusunaffectedConstraints<=5.17.*
- Version 5.18.3StatusunaffectedConstraints<=5.18.*
- Version 5.19StatusunaffectedConstraints<=*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
- ≥ 5.16 · < 5.17.14
- ≥ 5.18 · < 5.18.3
No data.
Red Hat Enterprise Linux 10
kernel
Not affected
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (8)
- https://access.redhat.com/security/cve/CVE-2022-49461 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2347815 Issue Tracking
- https://git.kernel.org/stable/c/19bb2d57eac86a368839a92117d8a10ab7183623 Patch
- https://git.kernel.org/stable/c/e7322da399fb86a2072f008b56f7160afa1b2051 Patch
- https://git.kernel.org/stable/c/fe29794c3585d039fefebaa2b5a4932a627ad4fd Patch
- https://lore.kernel.org/linux-cve-announce/2025022601-CVE-2022-49461-ccd9@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2022-49461
- https://www.cve.org/CVERecord?id=CVE-2022-49461
Change history (0)
No recorded changes yet.