PT-2025-18640
CVE-2022-49923
·
Published
2025-05-01
·
Updated
2025-07-10
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A potential memory leak has been identified in the Linux kernel, specifically in the
nxp nci send() function. This function calls nxp nci i2c write() and only frees the skb when nxp nci i2c write() fails. However, even if nxp nci i2c write() succeeds, the skb is not freed, resulting in a memory leak. The nxp nci send() function should also free the skb when nxp nci i2c write() succeeds.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾