https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:55:55 +0000 https://db.gcve.eu/vuln/cve-2022-49908 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: L2CAP: Fix memory leak in vhci_write</p> <p>Syzkaller reports a memory leak as follows: ==================================== BUG: memory leak unreferenced object 0xffff88810d81ac00 (size 240): [...] hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [&lt;ffffffff838733d9&gt;] __alloc_skb+0x1f9/0x270 net/core/skbuff.c:418 [&lt;ffffffff833f742f&gt;] alloc_skb include/linux/skbuff.h:1257 [inline] [&lt;ffffffff833f742f&gt;] bt_skb_alloc include/net/bluetooth/bluetooth.h:469 [inline] [&lt;ffffffff833f742f&gt;] vhci_get_user drivers/bluetooth/hci_vhci.c:391 [inline] [&lt;ffffffff833f742f&gt;] vhci_write+0x5f/0x230 drivers/bluetooth/hci_vhci.c:511 [&lt;ffffffff815e398d&gt;] call_write_iter include/linux/fs.h:2192 [inline] [&lt;ffffffff815e398d&gt;] new_sync_write fs/read_write.c:491 [inline] [&lt;ffffffff815e398d&gt;] vfs_write+0x42d/0x540 fs/read_write.c:578 [&lt;ffffffff815e3cdd&gt;] ksys_write+0x9d/0x160 fs/read_write.c:631 [&lt;ffffffff845e0645&gt;] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [&lt;ffffffff845e0645&gt;] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [&lt;ffffffff84600087&gt;] entry_SYSCALL_64_after_hwframe+0x63/0xcd ====================================</p> <p>HCI core will uses hci_rx_work() to process frame, which is queued to the hdev-&gt;rx_q tail in hci_recv_frame() by HCI dri…</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: L2CAP: Fix memory leak in vhci_write</p> <p>Syzkaller reports a memory leak as follows: ==================================== BUG: memory leak unreferenced object 0xffff88810d81ac00 (size 240): [...] hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [&lt;ffffffff838733d9&gt;] __alloc_skb+0x1f9/0x270 net/core/skbuff.c:418 [&lt;ffffffff833f742f&gt;] alloc_skb include/linux/skbuff.h:1257 [inline] [&lt;ffffffff833f742f&gt;] bt_skb_alloc include/net/bluetooth/bluetooth.h:469 [inline] [&lt;ffffffff833f742f&gt;] vhci_get_user drivers/bluetooth/hci_vhci.c:391 [inline] [&lt;ffffffff833f742f&gt;] vhci_write+0x5f/0x230 drivers/bluetooth/hci_vhci.c:511 [&lt;ffffffff815e398d&gt;] call_write_iter include/linux/fs.h:2192 [inline] [&lt;ffffffff815e398d&gt;] new_sync_write fs/read_write.c:491 [inline] [&lt;ffffffff815e398d&gt;] vfs_write+0x42d/0x540 fs/read_write.c:578 [&lt;ffffffff815e3cdd&gt;] ksys_write+0x9d/0x160 fs/read_write.c:631 [&lt;ffffffff845e0645&gt;] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [&lt;ffffffff845e0645&gt;] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [&lt;ffffffff84600087&gt;] entry_SYSCALL_64_after_hwframe+0x63/0xcd ====================================</p> <p>HCI core will uses hci_rx_work() to process frame, which is queued to the hdev-&gt;rx_q tail in hci_recv_frame() by HCI dri…</p> https://db.gcve.eu/vuln/cve-2022-49908