Linux Kernel up to 5.16.10 at86rf230 ieee802154_xmit_complete state issue

Summaryinfo

A vulnerability was found in Linux Kernel up to 5.16.10 and classified as problematic. This affects the function ieee802154_xmit_complete of the component at86rf230. Executing a manipulation can lead to state issue. This vulnerability is handled as CVE-2022-48794. There is not any exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic was found in Linux Kernel up to 5.16.10. This vulnerability affects the function ieee802154_xmit_complete of the component at86rf230. The manipulation with an unknown input leads to a state issue vulnerability. The CWE definition for the vulnerability is CWE-371. The impact remains unknown. CVE summarizes:

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: at86rf230: Stop leaking skb's Upon error the ieee802154_xmit_complete() helper is not called. Only ieee802154_wake_queue() is called manually. In the Tx case we then leak the skb structure. Free the skb structure upon error before returning when appropriate. As the 'is_tx = 0' cannot be moved in the complete handler because of a possible race between the delay in switching to STATE_RX_AACK_ON and a new interrupt, we introduce an intermediate 'was_tx' boolean just for this purpose. There is no Fixes tag applying here, many changes have been made on this area and the issue kind of always existed.

The advisory is shared for download at git.kernel.org. This vulnerability was named CVE-2022-48794 since 07/16/2024. The exploitation appears to be difficult. There are known technical details, but no exploit is available.

Upgrading to version 4.9.303, 4.14.268, 4.19.231, 5.4.181, 5.10.102, 5.15.25 or 5.16.11 eliminates this vulnerability. Applying the patch d2a1eaf51b7d/af649e5c95f5/6312f6a53fd3/455ef08d6e54/0fd484644c68/23b2a2538240/1c72f04d52b7/e5ce576d45bf is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 4.9.302
• 4.14.267
• 4.19.230
• 5.4.180
• 5.10.101
• 5.15.0
• 5.15.1
• 5.15.2
• 5.15.3
• 5.15.4
• 5.15.5
• 5.15.6
• 5.15.7
• 5.15.8
• 5.15.9
• 5.15.10
• 5.15.11
• 5.15.12
• 5.15.13
• 5.15.14
• 5.15.15
• 5.15.16
• 5.15.17
• 5.15.18
• 5.15.19
• 5.15.20
• 5.15.21
• 5.15.22
• 5.15.23
• 5.15.24
• 5.16.0
• 5.16.1
• 5.16.2
• 5.16.3
• 5.16.4
• 5.16.5
• 5.16.6
• 5.16.7
• 5.16.8
• 5.16.9
• 5.16.10

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion