CVE-2022-26878CWE-401

CVE-2022-26878

Medium · published March 11, 2022

CVSS v3.1
5.5
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed).

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.7th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2022-03-11T12:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 5.13, < 5.15.175.15.17
linux/linux_kernel≥ 5.16, < 5.16.35.16.3
References (10)
http://www.openwall.com/lists/oss-security/2022/03/11/1 · [email protected]https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.17 · [email protected]https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1d0688421449718c6c5f46e458a378c9b530ba18 · [email protected]https://lore.kernel.org/linux-bluetooth/1A203F5E-FB5E-430C-BEA3-86B191D69D58%40holtmann.org/ · [email protected]http://www.openwall.com/lists/oss-security/2022/03/11/1 · af854a3a-2127-422b-91ae-364da2661108https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.17 · af854a3a-2127-422b-91ae-364da2661108https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1d0688421449718c6c5f46e458a378c9b530ba18 · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/linux-bluetooth/1A203F5E-FB5E-430C-BEA3-86B191D69D58%40holtmann.org/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 11 MAR 06:22Z
    drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed)
    cvelistv5