CVE-2022-49855: net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: iosm: fix memory leak in ipcpciereadbioscfg
ipcpciereadbioscfg() is using the acpievaluatedsm() to obtain the wwan power state configuration from BIOS but is not freeing the acpiobject. The acpievaluatedsm() returned acpiobject to be freed.
Free the acpiobject after use.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49855?
CVE-2022-49855 is classified as a medium severity vulnerability.
What systems are affected by CVE-2022-49855?
CVE-2022-49855 affects the Linux Kernel specifically in the wwan module.
What is the cause of CVE-2022-49855?
CVE-2022-49855 is caused by a memory leak in the ipc_pcie_read_bios_cfg function due to not freeing the acpi_object.
How do I fix CVE-2022-49855?
To fix CVE-2022-49855, update to the latest version of the Linux Kernel where this vulnerability has been patched.
What is the impact of CVE-2022-49855?
The impact of CVE-2022-49855 includes potential memory resource exhaustion over time, which can lead to system instability.