In the Linux kernel, the following vulnerability has been resolved:
net: bridge: vlan: fix memory leak in __allowed_ingress
When using per-vlan state, if vlan snooping and stats are disabled,
untagged or priority-tagged ingress frame will go to check pvid state.
If the port state is forwarding and the pvid state is not
learning/forwarding, untagged or priority-tagged frame will be dropped
but skb memory is not freed.
Should free skb when __allowed_ingress returns false.
Metrics
Affected Vendors & Products
References
History
Mon, 24 Mar 2025 18:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:* |
Thu, 19 Dec 2024 09:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Linux
Linux linux Kernel |
|
CPEs | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Linux
Linux linux Kernel |
|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: Linux
Published: 2024-06-20T11:13:30.612Z
Updated: 2024-12-19T08:06:56.891Z
Reserved: 2024-06-20T11:09:39.055Z
Link: CVE-2022-48748

Updated: 2024-08-03T15:25:01.588Z

Status : Analyzed
Published: 2024-06-20T12:15:13.047
Modified: 2025-03-24T18:17:51.687
Link: CVE-2022-48748
