Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down In can327_feed_frame_to_netdev(), it did not free the skb when netdev is down, and all callers of can327_feed_frame_to_netdev() did not free allocated skb too. That would trigger skb leak. Fix it by adding kfree_skb() in can327_feed_frame_to_netdev() when netdev is down. Not tested, just compiled.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 43da2f07622f41376c7ddab8f73dc2b1d3ab9715 before 797b1d9fc0e1f4351e4ad49b078c1a3cdc0d4a08; affected 43da2f07622f41376c7ddab8f73dc2b1d3ab9715 before 8fa452cfafed521aaf5a18c71003fe24b1ee6141 |
| Linux / Linux | affected 6.0; unaffected 0 before 6.0; unaffected 6.0.12 through 6.0.*; unaffected 6.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/797b1d9fc0e1f4351e4ad49b078c1a3cdc0d4a08
- https://git.kernel.org/stable/c/8fa452cfafed521aaf5a18c71003fe24b1ee6141
ADP enrichment
No English description supplied.
No references supplied.