CVE-2022-48809
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
net: fix a memleak when uncloning an skb dst and its metadata
In the Linux kernel, the following vulnerability has been resolved: net: fix a memleak when uncloning an skb dst and its metadata When uncloning an skb dst and its associated metadata, a new dst+metadata is allocated and later replaces the old one in the skb. This is helpful to have a non-shared dst+metadata attached to a specific skb. The issue is the uncloned dst+metadata is initialized with a refcount of 1, which is increased to 2 before attaching it to the skb. When tun_dst_unclone returns, the dst+metadata is only referenced from a single place (the skb) while its refcount is 2. Its refcount will never drop to 0 (when the skb is consumed), leading to a memory leak. Fix this by removing the call to dst_hold in tun_dst_unclone, as the dst+metadata refcount is already 1.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| fc4099f17240767554ff3a73977acb78ef615404 | affected | git | 4ac84498fbe84a00e7aef185e2bb3e40ce71eca4 | Unavailable | None listed |
| fc4099f17240767554ff3a73977acb78ef615404 | affected | git | c1ff27d100e2670b03cbfddb9117e5f9fc672540 | Unavailable | None listed |
| fc4099f17240767554ff3a73977acb78ef615404 | affected | git | 0be943916d781df2b652793bb2d3ae4f9624c10a | Unavailable | None listed |
| fc4099f17240767554ff3a73977acb78ef615404 | affected | git | a80817adc2a4c1ba26a7aa5f3ed886e4a18dff88 | Unavailable | None listed |
| fc4099f17240767554ff3a73977acb78ef615404 | affected | git | 00e6d6c3bc14dfe32824e2c515f0e0f2d6ecf2f1 | Unavailable | None listed |
| fc4099f17240767554ff3a73977acb78ef615404 | affected | git | fdcb263fa5cda15b8cb24a641fa2718c47605314 | Unavailable | None listed |
| fc4099f17240767554ff3a73977acb78ef615404 | affected | git | 8b1087b998e273f07be13dcb5f3ca4c309c7f108 | Unavailable | None listed |
| fc4099f17240767554ff3a73977acb78ef615404 | affected | git | 9eeabdf17fa0ab75381045c867c370f4cc75a613 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.3 | Unavailable | None listed |
| 4.9.302 | unaffected | semver | Unavailable | 4.9.* | None listed |
| 4.14.267 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.230 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.180 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.101 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.24 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 5.16.10 | unaffected | semver | Unavailable | 5.16.* | None listed |
| 5.17 | unaffected | original_commit_for_fix | Unavailable | * | None listed |