CVE-2022-49729
nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred Similar to the handling of play_deferred in commit 19cfe912c37b ("Bluetooth: btusb: Fix memory leak in play_deferred"), we thought a patch might be needed here as well. Currently usb_submit_urb is called directly to submit deferred tx urbs after unanchor them. So the usb_giveback_urb_bh would failed to unref it in usb_unanchor_urb and cause memory leak. Put those urbs in tx_anchor to avoid the leak, and also fix the error handling.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
3.14
References 8
git.kernel.org
- stable/c/1eb0afecfb9cd0f38424b82bd9aaa542310934ee
- stable/c/f21f908347712b8288ffe83b531b5e977042b29c
- stable/c/3e7c7df6991ac349f2fa8540047757df666e610f
- stable/c/6b4d8b44e7163a77fe942f5b80e1651c1b78c537
- stable/c/0eeec1a8b0cd38c47edeb042980a6aeacecf35ed
- stable/c/6616872cfe7f0474a22dd1f12699f95bcf81a54d
- stable/c/3eadc560c1919b8193d17334145dad9a917960e4
- stable/c/8a4d480702b71184fabcf379b80bf7539716752e