CVE-2022-48844: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48844 is a vulnerability in the Linux kernel's Bluetooth subsystem, specifically in the hcicore component. The issue was discovered when sentcmd memory was not being freed before freeing hci_dev, causing memory contents to leak (Kernel Git).

The vulnerability occurs in the Bluetooth HCI core component where the sentcmd skb (socket buffer) is not properly freed before the hcidev structure is deallocated. This results in a memory leak of the command buffer contents. The issue has been assigned a CVSS v3 score of 5.5 (Medium) (Ubuntu Security).

The primary impact of this vulnerability is a memory leak in the Linux kernel's Bluetooth subsystem. When Bluetooth devices are removed or the driver is unloaded, the sent command buffer memory is not properly freed, leading to resource consumption over time (Kernel Git).

The issue has been fixed by adding proper cleanup of the sentcmd skb in the hcireleasedev function. The fix involves adding 'kfreeskb(hdev->sentcmd)' before freeing the hcidev structure (Kernel Git). Users should update their Linux kernel to a version that includes this fix.