Skip to content
fr Sign in
7.5 High

CVE-2022-48748 In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in…

Description

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in __allowed_ingress When using per-vlan state, if vlan snooping and stats are disabled, untagged or priority-tagged ingress frame will go to check pvid state. If the port state is forwarding and the pvid state is not learning/forwarding, untagged or priority-tagged frame will be dropped but skb memory is not freed. Should free skb when __allowed_ingress returns false.

Affected products and versions

Product Affected versions Fixed in
Linux 5.17 earliest → < 5.17 5.17
Linux 5.16 earliest → < 5.16.5 5.16.5
Linux 5.15 earliest → < 5.15.19 5.15.19
Linux 5.10 earliest → < 5.10.96 5.10.96
Linux 5.6 No fix stated
linux_kernel 5.17 earliest → < 5.17 5.17

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Linux

The 18283 CVEs of Linux →
CVE-2026-99270 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler() 8.1 High CVE-2026-99269 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before… 7.8 High CVE-2026-99261 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for… Not rated CVE-2026-99260 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags… Not rated
Track this CVE