CVE-2022-48748 net: bridge: vlan: fix memory leak in __allowed_ingress
A memory leak in the Linux kernel bridge VLAN code allows attackers to cause denial of service by sending specific untagged frames when VLAN snooping is disabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-48748?
CVE-2022-48748 is a high-severity denial of service vulnerability in Linux kernel, published on 20 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: vlan: fix memory leak in __allowed_ingress
When using per-vlan state, if vlan snooping and stats are disabled, untagged or priority-tagged ingress frame will go to check pvid state. If the port state is forwarding and the pvid state is not learning/forwarding, untagged or priority-tagged frame will be dropped but skb memory is not freed. Should free skb when __allowed_ingress returns false.
Weakness: CWE-400
Which versions are affected by CVE-2022-48748?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-48748?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-48748 being exploited?
There is no known exploitation of CVE-2022-48748 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-48748, GHSA-h9h2-6w4q-6c52, UBUNTU-CVE-2022-48748.