CVE-2022-49008

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential skb leak issue has been identified in the Linux kernel, specifically in the can327 feed frame to netdev() function. This issue occurs when the netdev is down, and the function fails to free the skb, leading to a leak. The problem is exacerbated by the fact that all callers of can327 feed frame to netdev() also fail to free the allocated skb. To fix this issue, the solution involves adding a kfree skb() call in can327 feed frame to netdev() when the netdev is down.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.