Ubuntu: (CVE-2022-48844): linux-intel-iotg-5.15 vulnerability

Ubuntu: (CVE-2022-48844): linux-intel-iotg-5.15 vulnerability

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

07/16/2024

Created

11/21/2024

Added

11/19/2024

Modified

02/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix leaking sent_cmd skb sent_cmd memory is not freed before freeing hci_dev causing it to leak it contents.

Solution(s)

• ubuntu-upgrade-linux-intel-iotg-5-15
• ubuntu-upgrade-linux-realtime

References

• https://attackerkb.com/topics/cve-2022-48844
• CVE - 2022-48844
• https://git.kernel.org/linus/dd3b1dc3dd050f1f47cd13e300732852414270f8
• https://git.kernel.org/stable/c/3679ccc09d8806686d579095ed504e045af7f7d6
• https://git.kernel.org/stable/c/9473d06bd1c8da49eafb685aa95a290290c672dd
• https://git.kernel.org/stable/c/dd3b1dc3dd050f1f47cd13e300732852414270f8
• https://www.cve.org/CVERecord?id=CVE-2022-48844