CVE-2022-49013

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2022-49013", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-08-22T01:27:53.644Z", "datePublished": "2024-10-21T20:06:23.375Z", "dateUpdated": "2026-05-11T18:51:31.295Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T18:51:31.295Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix memory leak in sctp_stream_outq_migrate()\n\nWhen sctp_stream_outq_migrate() is called to release stream out resources,\nthe memory pointed to by prio_head in stream out is not released.\n\nThe memory leak information is as follows:\n unreferenced object 0xffff88801fe79f80 (size 64):\n comm \"sctp_repo\", pid 7957, jiffies 4294951704 (age 36.480s)\n hex dump (first 32 bytes):\n 80 9f e7 1f 80 88 ff ff 80 9f e7 1f 80 88 ff ff ................\n 90 9f e7 1f 80 88 ff ff 90 9f e7 1f 80 88 ff ff ................\n backtrace:\n [<ffffffff81b215c6>] kmalloc_trace+0x26/0x60\n [<ffffffff88ae517c>] sctp_sched_prio_set+0x4cc/0x770\n [<ffffffff88ad64f2>] sctp_stream_init_ext+0xd2/0x1b0\n [<ffffffff88aa2604>] sctp_sendmsg_to_asoc+0x1614/0x1a30\n [<ffffffff88ab7ff1>] sctp_sendmsg+0xda1/0x1ef0\n [<ffffffff87f765ed>] inet_sendmsg+0x9d/0xe0\n [<ffffffff8754b5b3>] sock_sendmsg+0xd3/0x120\n [<ffffffff8755446a>] __sys_sendto+0x23a/0x340\n [<ffffffff87554651>] __x64_sys_sendto+0xe1/0x1b0\n [<ffffffff89978b49>] do_syscall_64+0x39/0xb0\n [<ffffffff89a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["include/net/sctp/stream_sched.h", "net/sctp/stream.c", "net/sctp/stream_sched.c", "net/sctp/stream_sched_prio.c", "net/sctp/stream_sched_rr.c"], "versions": [{"version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "a7555681e50bdebed2c40ff7404ee73c2e932993", "status": "affected", "versionType": "git"}, {"version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "176ee6c673ccd118e9392fd2dbb165423bdb99ca", "status": "affected", "versionType": "git"}, {"version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "0dfb9a566327182387c90100ea54d8426cee8c67", "status": "affected", "versionType": "git"}, {"version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "fa20f88271259d42ebe66f0a8c4c20199e888c99", "status": "affected", "versionType": "git"}, {"version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["include/net/sctp/stream_sched.h", "net/sctp/stream.c", "net/sctp/stream_sched.c", "net/sctp/stream_sched_prio.c", "net/sctp/stream_sched_rr.c"], "versions": [{"version": "4.15", "status": "affected"}, {"version": "0", "lessThan": "4.15", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.226", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.158", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.82", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.0.12", "lessThanOrEqual": "6.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "5.4.226"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "5.10.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "5.15.82"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.0.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a7555681e50bdebed2c40ff7404ee73c2e932993"}, {"url": "https://git.kernel.org/stable/c/176ee6c673ccd118e9392fd2dbb165423bdb99ca"}, {"url": "https://git.kernel.org/stable/c/0dfb9a566327182387c90100ea54d8426cee8c67"}, {"url": "https://git.kernel.org/stable/c/fa20f88271259d42ebe66f0a8c4c20199e888c99"}, {"url": "https://git.kernel.org/stable/c/9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9"}], "title": "sctp: fix memory leak in sctp_stream_outq_migrate()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-49013", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-22T13:13:36.395283Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-22T13:18:38.448Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-49013", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-22T13:13:36.395283Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-22T13:13:39.606Z"}}], "cna": {"title": "sctp: fix memory leak in sctp_stream_outq_migrate()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "a7555681e50bdebed2c40ff7404ee73c2e932993", "versionType": "git"}, {"status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "176ee6c673ccd118e9392fd2dbb165423bdb99ca", "versionType": "git"}, {"status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "0dfb9a566327182387c90100ea54d8426cee8c67", "versionType": "git"}, {"status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "fa20f88271259d42ebe66f0a8c4c20199e888c99", "versionType": "git"}, {"status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "lessThan": "9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9", "versionType": "git"}], "programFiles": ["include/net/sctp/stream_sched.h", "net/sctp/stream.c", "net/sctp/stream_sched.c", "net/sctp/stream_sched_prio.c", "net/sctp/stream_sched_rr.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.15"}, {"status": "unaffected", "version": "0", "lessThan": "4.15", "versionType": "semver"}, {"status": "unaffected", "version": "5.4.226", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.158", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.82", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.0.12", "versionType": "semver", "lessThanOrEqual": "6.0.*"}, {"status": "unaffected", "version": "6.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["include/net/sctp/stream_sched.h", "net/sctp/stream.c", "net/sctp/stream_sched.c", "net/sctp/stream_sched_prio.c", "net/sctp/stream_sched_rr.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/a7555681e50bdebed2c40ff7404ee73c2e932993"}, {"url": "https://git.kernel.org/stable/c/176ee6c673ccd118e9392fd2dbb165423bdb99ca"}, {"url": "https://git.kernel.org/stable/c/0dfb9a566327182387c90100ea54d8426cee8c67"}, {"url": "https://git.kernel.org/stable/c/fa20f88271259d42ebe66f0a8c4c20199e888c99"}, {"url": "https://git.kernel.org/stable/c/9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix memory leak in sctp_stream_outq_migrate()\n\nWhen sctp_stream_outq_migrate() is called to release stream out resources,\nthe memory pointed to by prio_head in stream out is not released.\n\nThe memory leak information is as follows:\n unreferenced object 0xffff88801fe79f80 (size 64):\n comm \"sctp_repo\", pid 7957, jiffies 4294951704 (age 36.480s)\n hex dump (first 32 bytes):\n 80 9f e7 1f 80 88 ff ff 80 9f e7 1f 80 88 ff ff ................\n 90 9f e7 1f 80 88 ff ff 90 9f e7 1f 80 88 ff ff ................\n backtrace:\n [<ffffffff81b215c6>] kmalloc_trace+0x26/0x60\n [<ffffffff88ae517c>] sctp_sched_prio_set+0x4cc/0x770\n [<ffffffff88ad64f2>] sctp_stream_init_ext+0xd2/0x1b0\n [<ffffffff88aa2604>] sctp_sendmsg_to_asoc+0x1614/0x1a30\n [<ffffffff88ab7ff1>] sctp_sendmsg+0xda1/0x1ef0\n [<ffffffff87f765ed>] inet_sendmsg+0x9d/0xe0\n [<ffffffff8754b5b3>] sock_sendmsg+0xd3/0x120\n [<ffffffff8755446a>] __sys_sendto+0x23a/0x340\n [<ffffffff87554651>] __x64_sys_sendto+0xe1/0x1b0\n [<ffffffff89978b49>] do_syscall_64+0x39/0xb0\n [<ffffffff89a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd"}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.226", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.158", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.82", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.0.12", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1", "versionStartIncluding": "4.15"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-04T08:28:04.535Z"}}}, "cveMetadata": {"cveId": "CVE-2022-49013", "state": "PUBLISHED", "dateUpdated": "2025-05-04T08:28:04.535Z", "dateReserved": "2024-08-22T01:27:53.644Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-10-21T20:06:23.375Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["include/net/sctp/stream_sched.h", "net/sctp/stream.c", "net/sctp/stream_sched.c", "net/sctp/stream_sched_prio.c", "net/sctp/stream_sched_rr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a7555681e50bdebed2c40ff7404ee73c2e932993", "status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "versionType": "git"}, {"lessThan": "176ee6c673ccd118e9392fd2dbb165423bdb99ca", "status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "versionType": "git"}, {"lessThan": "0dfb9a566327182387c90100ea54d8426cee8c67", "status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "versionType": "git"}, {"lessThan": "fa20f88271259d42ebe66f0a8c4c20199e888c99", "status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "versionType": "git"}, {"lessThan": "9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9", "status": "affected", "version": "637784ade221a3c8a7ecd0f583eddd95d6276b9a", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["include/net/sctp/stream_sched.h", "net/sctp/stream.c", "net/sctp/stream_sched.c", "net/sctp/stream_sched_prio.c", "net/sctp/stream_sched_rr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.15"}, {"lessThan": "4.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.226", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.158", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.82", "versionType": "semver"}, {"lessThanOrEqual": "6.0.*", "status": "unaffected", "version": "6.0.12", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C6A9C59-A3EB-4E20-8696-8E40096052EB", "versionEndExcluding": "5.4.226", "versionStartIncluding": "4.15", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0FB1AF1-0A0B-4419-B25F-C61F17380E18", "versionEndExcluding": "5.10.158", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0DC20DB6-73C1-4465-B931-117BFB8EBB02", "versionEndExcluding": "5.15.82", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D6D56E90-F3EE-413D-B3E2-B518932F0C7D", "versionEndExcluding": "6.0.12", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*", "matchCriteriaId": "3FFFB0B3-930D-408A-91E2-BAE0C2715D80", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*", "matchCriteriaId": "8535320E-A0DB-4277-800E-D0CE5BBA59E8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix memory leak in sctp_stream_outq_migrate()\n\nWhen sctp_stream_outq_migrate() is called to release stream out resources,\nthe memory pointed to by prio_head in stream out is not released.\n\nThe memory leak information is as follows:\n unreferenced object 0xffff88801fe79f80 (size 64):\n comm \"sctp_repo\", pid 7957, jiffies 4294951704 (age 36.480s)\n hex dump (first 32 bytes):\n 80 9f e7 1f 80 88 ff ff 80 9f e7 1f 80 88 ff ff ................\n 90 9f e7 1f 80 88 ff ff 90 9f e7 1f 80 88 ff ff ................\n backtrace:\n [<ffffffff81b215c6>] kmalloc_trace+0x26/0x60\n [<ffffffff88ae517c>] sctp_sched_prio_set+0x4cc/0x770\n [<ffffffff88ad64f2>] sctp_stream_init_ext+0xd2/0x1b0\n [<ffffffff88aa2604>] sctp_sendmsg_to_asoc+0x1614/0x1a30\n [<ffffffff88ab7ff1>] sctp_sendmsg+0xda1/0x1ef0\n [<ffffffff87f765ed>] inet_sendmsg+0x9d/0xe0\n [<ffffffff8754b5b3>] sock_sendmsg+0xd3/0x120\n [<ffffffff8755446a>] __sys_sendto+0x23a/0x340\n [<ffffffff87554651>] __x64_sys_sendto+0xe1/0x1b0\n [<ffffffff89978b49>] do_syscall_64+0x39/0xb0\n [<ffffffff89a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd"}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sctp: se corrige la p\u00e9rdida de memoria en sctp_stream_outq_migrate() Cuando se llama a sctp_stream_outq_migrate() para liberar recursos de salida de flujo, la memoria a la que apunta prio_head en salida de flujo no se libera. La informaci\u00f3n de p\u00e9rdida de memoria es la siguiente: objeto sin referencia 0xffff88801fe79f80 (tama\u00f1o 64): comm \"sctp_repo\", pid 7957, jiffies 4294951704 (edad 36.480s) volcado hexadecimal (primeros 32 bytes): 80 9f e7 1f 80 88 ff ff 80 9f e7 1f 80 88 ff ff ................ 90 9f e7 1f 80 88 ff ff 90 9f e7 1f 80 88 ff ff ................ backtrace: [] kmalloc_trace+0x26/0x60 [] sctp_sched_prio_set+0x4cc/0x770 [] sctp_stream_init_ext+0xd2/0x1b0 [] sctp_sendmsg_to_asoc+0x1614/0x1a30 [] sctp_sendmsg+0xda1/0x1ef0 [] inet_sendmsg+0x9d/0xe0 [] sock_sendmsg+0xd3/0x120 [] __sys_sendto+0x23a/0x340 [] __x64_sys_sendto+0xe1/0x1b0 [] hacer_llamada_al_sistema_64+0x39/0xb0 [] entrada_LLAMADA_AL_SISTEMA_64_despu\u00e9s_de_hwframe+0x63/0xcd"}], "id": "CVE-2022-49013", "lastModified": "2026-06-17T05:16:50.983", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-49013", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-10-22T13:13:36.395283Z", "version": "2.0.3"}}]}, "published": "2024-10-21T20:15:12.637", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0dfb9a566327182387c90100ea54d8426cee8c67"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/176ee6c673ccd118e9392fd2dbb165423bdb99ca"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a7555681e50bdebed2c40ff7404ee73c2e932993"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/fa20f88271259d42ebe66f0a8c4c20199e888c99"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: sctp: fix memory leak in sctp_stream_outq_migrate()", "id": "2320698", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2320698"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-401", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nsctp: fix memory leak in sctp_stream_outq_migrate()\nWhen sctp_stream_outq_migrate() is called to release stream out resources,\nthe memory pointed to by prio_head in stream out is not released.\nThe memory leak information is as follows:\nunreferenced object 0xffff88801fe79f80 (size 64):\ncomm \"sctp_repo\", pid 7957, jiffies 4294951704 (age 36.480s)\nhex dump (first 32 bytes):\n80 9f e7 1f 80 88 ff ff 80 9f e7 1f 80 88 ff ff ................\n90 9f e7 1f 80 88 ff ff 90 9f e7 1f 80 88 ff ff ................\nbacktrace:\n[<ffffffff81b215c6>] kmalloc_trace+0x26/0x60\n[<ffffffff88ae517c>] sctp_sched_prio_set+0x4cc/0x770\n[<ffffffff88ad64f2>] sctp_stream_init_ext+0xd2/0x1b0\n[<ffffffff88aa2604>] sctp_sendmsg_to_asoc+0x1614/0x1a30\n[<ffffffff88ab7ff1>] sctp_sendmsg+0xda1/0x1ef0\n[<ffffffff87f765ed>] inet_sendmsg+0x9d/0xe0\n[<ffffffff8754b5b3>] sock_sendmsg+0xd3/0x120\n[<ffffffff8755446a>] __sys_sendto+0x23a/0x340\n[<ffffffff87554651>] __x64_sys_sendto+0xe1/0x1b0\n[<ffffffff89978b49>] do_syscall_64+0x39/0xb0\n[<ffffffff89a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd"], "name": "CVE-2022-49013", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-10-21T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-49013\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-49013\nhttps://lore.kernel.org/linux-cve-announce/2024102152-CVE-2022-49013-dd61@gregkh/T"], "threat_severity": "Moderate"}

{}