CVE-2022-49924: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: Fix potential memory leak in fdp_nci_send() fdp_nci_send() will call fdp_nci_i2c_write that will not free skb in the function. As a result, when fdp_nci_i2c_write() finished, the skb will memleak. fdp_nci_send() should free skb after fdp_nci_i2c_write() finished.

Affected products

• Linux Linux Kernel: from 4.4, before 5.10.154 (fixed in 5.10.154); from 5.11, before 5.15.78 (fixed in 5.15.78); from 5.16, before 6.0.8 (fixed in 6.0.8); version 6.1 only

Published 2025-05-01. Last modified 2026-06-17.