blob: cd0f64d512511de03db5701f945e04e431938bea [file] [log] [blame]
{
"containers": {
"cna": {
"providerMetadata": {
"orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038"
},
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmxser: fix xmit_buf leak in activate when LSR == 0xff\n\nWhen LSR is 0xff in ->activate() (rather unlike), we return an error.\nProvided ->shutdown() is not called when ->activate() fails, nothing\nactually frees the buffer in this case.\n\nFix this by properly freeing the buffer in a designated label. We jump\nthere also from the \"!info->type\" if now too."
}
],
"affected": [
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/tty/mxser.c"
],
"versions": [
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "376922045009f8ea2d20a8fa3475e95b47c41690",
"status": "affected",
"versionType": "git"
},
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d",
"status": "affected",
"versionType": "git"
},
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "685b6d16bf89595310b5d61394c9b97cc9505c7c",
"status": "affected",
"versionType": "git"
},
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "996291d06851a26678a0fab488b6e1f0677c0576",
"status": "affected",
"versionType": "git"
},
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "2cd05c38a27bee7fb42aa4d43174d68ac55dac0f",
"status": "affected",
"versionType": "git"
},
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "b125b08dbee3611f03f53b71471813ed4ccafcdd",
"status": "affected",
"versionType": "git"
},
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "6c9041b2f90c0eace73106f22350e1d2c98f5edc",
"status": "affected",
"versionType": "git"
},
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "6dffc2035fbaada60ca8db59e0962e34f760370a",
"status": "affected",
"versionType": "git"
},
{
"version": "6769140d304731f0a3b177470a2adb4bacd9036b",
"lessThan": "cd3a4907ee334b40d7aa880c7ab310b154fd5cd4",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/tty/mxser.c"
],
"versions": [
{
"version": "2.6.33",
"status": "affected"
},
{
"version": "0",
"lessThan": "2.6.33",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "4.9.311",
"lessThanOrEqual": "4.9.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "4.14.276",
"lessThanOrEqual": "4.14.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "4.19.238",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.4.189",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.10.110",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.15.33",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.16.19",
"lessThanOrEqual": "5.16.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.17.2",
"lessThanOrEqual": "5.17.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.18",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "4.9.311"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "4.14.276"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "4.19.238"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "5.4.189"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "5.10.110"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "5.15.33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "5.16.19"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "5.17.2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "5.18"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/376922045009f8ea2d20a8fa3475e95b47c41690"
},
{
"url": "https://git.kernel.org/stable/c/125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d"
},
{
"url": "https://git.kernel.org/stable/c/685b6d16bf89595310b5d61394c9b97cc9505c7c"
},
{
"url": "https://git.kernel.org/stable/c/996291d06851a26678a0fab488b6e1f0677c0576"
},
{
"url": "https://git.kernel.org/stable/c/2cd05c38a27bee7fb42aa4d43174d68ac55dac0f"
},
{
"url": "https://git.kernel.org/stable/c/b125b08dbee3611f03f53b71471813ed4ccafcdd"
},
{
"url": "https://git.kernel.org/stable/c/6c9041b2f90c0eace73106f22350e1d2c98f5edc"
},
{
"url": "https://git.kernel.org/stable/c/6dffc2035fbaada60ca8db59e0962e34f760370a"
},
{
"url": "https://git.kernel.org/stable/c/cd3a4907ee334b40d7aa880c7ab310b154fd5cd4"
}
],
"title": "mxser: fix xmit_buf leak in activate when LSR == 0xff",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038",
"cveID": "CVE-2022-49191",
"requesterUserId": "gregkh@kernel.org",
"serial": "1",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0"
}