Bug 2161185 (CVE-2022-3543) - CVE-2022-3543 kernel: A flaw in unix_sock_destructor/unix_release_sock in net/unix/af_unix.c leads to memory leak
Summary: CVE-2022-3543 kernel: A flaw in unix_sock_destructor/unix_release_sock in net...
Keywords:
Status: NEW
Alias: CVE-2022-3543
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2161197 2161198 2161199 2161200
Blocks: 2161183
TreeView+ depends on / blocked
 
Reported: 2023-01-16 09:11 UTC by Rohit Keshri
Modified: 2023-07-07 08:33 UTC (History)
38 users (show)

Fixed In Version: kernel 6.1 RC1
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in unix_sock_destructor/unix_release_sock in net/unix/af_unix.c in the BPF component in the Linux Kernel. This issue may lead to a memory leak problem.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Rohit Keshri 2023-01-16 09:11:02 UTC 
A vulnerability has been found in unix_sock_destructor/unix_release_sock of the file net/unix/af_unix.c of the component BPF in the Linux Kernel. The manipulation may leak to a memory leak problem.

Reference:
https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=7a62ed61367b8fd01bae1e18e30602c25060d824
Note You need to log in before you can comment on or make changes to this bug.