5.5

CVE-2022-48641

netfilter: ebtables: fix memory leak when blob is malformed

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: fix memory leak when blob is malformed

The bug fix was incomplete, it "replaced" crash with a memory leak.
The old code had an assignment to "ret" embedded into the conditional,
restore this.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.14.292 < 4.14.295
Linux ≫ Linux Kernel Version >= 4.19.257 < 4.19.260
Linux ≫ Linux Kernel Version >= 5.4.212 < 5.4.215
Linux ≫ Linux Kernel Version >= 5.10.140 < 5.10.146
Linux ≫ Linux Kernel Version >= 5.15.64 < 5.15.71
Linux ≫ Linux Kernel Version >= 5.19.6 < 5.19.12
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.146
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab
Patch
https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e
Patch
https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33
Patch
https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9
Patch
https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1
Patch
https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f
Patch
https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee
Patch