{"id":"DEBIAN-CVE-2022-49153","details":"In the Linux kernel, the following vulnerability has been resolved:  wireguard: socket: free skb in send6 when ipv6 is disabled  I got a memory leak report:  unreferenced object 0xffff8881191fc040 (size 232):   comm \"kworker/u17:0\", pid 23193, jiffies 4295238848 (age 3464.870s)   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003cffffffff814c3ef4\u003e] slab_post_alloc_hook+0x84/0x3b0     [\u003cffffffff814c8977\u003e] kmem_cache_alloc_node+0x167/0x340     [\u003cffffffff832974fb\u003e] __alloc_skb+0x1db/0x200     [\u003cffffffff82612b5d\u003e] wg_socket_send_buffer_to_peer+0x3d/0xc0     [\u003cffffffff8260e94a\u003e] wg_packet_send_handshake_initiation+0xfa/0x110     [\u003cffffffff8260ec81\u003e] wg_packet_handshake_send_worker+0x21/0x30     [\u003cffffffff8119c558\u003e] process_one_work+0x2e8/0x770     [\u003cffffffff8119ca2a\u003e] worker_thread+0x4a/0x4b0     [\u003cffffffff811a88e0\u003e] kthread+0x120/0x160     [\u003cffffffff8100242f\u003e] ret_from_fork+0x1f/0x30  In function wg_socket_send_buffer_as_reply_to_skb() or wg_socket_send_ buffer_to_peer(), the semantics of send6() is required to free skb. But when CONFIG_IPV6 is disable, kfree_skb() is missing. This patch adds it to fix this bug.","modified":"2026-09-01T16:05:30.329758075Z","published":"2025-02-26T07:00:52.533Z","upstream":["CVE-2022-49153"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-49153"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.17.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49153.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.17.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49153.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.17.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49153.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}