References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Known Affected Software Configurations Switch to CPE 2.2

Change History

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.15 up to (excluding) 5.15.8

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NIST CWE-401

https://git.kernel.org/stable/c/31cb32a590d62b18f69a9a6d433f4e69c74fdd56 No Types Assigned

https://git.kernel.org/stable/c/31cb32a590d62b18f69a9a6d433f4e69c74fdd56 Patch

https://git.kernel.org/stable/c/75a422165477dd12d2d20aa7c9ee7c9a281c9908 No Types Assigned

https://git.kernel.org/stable/c/75a422165477dd12d2d20aa7c9ee7c9a281c9908 Patch

In the Linux kernel, the following vulnerability has been resolved:

can: m_can: m_can_read_fifo: fix memory leak in error branch

In m_can_read_fifo(), if the second call to m_can_fifo_read() fails,
the function jump to the out_fail label and returns without calling
m_can_receive_skb(). This means that the skb previously allocated by
alloc_can_skb() is not freed. In other terms, this is a memory leak.

This patch adds a goto label to destroy the skb if an error occurs.

Issue was found with GCC

kernel.org https://git.kernel.org/stable/c/31cb32a590d62b18f69a9a6d433f4e69c74fdd56 [No types assigned]

kernel.org https://git.kernel.org/stable/c/75a422165477dd12d2d20aa7c9ee7c9a281c9908 [No types assigned]