CVE-2022-49866: net: wwan: mhi: fix memory leak in mhi_mbim_dellink
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: mhi: fix memory leak in mhimbimdellink
MHI driver registers network device without setting the needsfreenetdev flag, and does NOT call freenetdev() when unregisters network device, which causes a memory leak.
This patch sets needsfreenetdev to true when registers network device, which makes netdev subsystem call freenetdev() automatically after unregisternetdevice().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49866?
CVE-2022-49866 is classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2022-49866?
To fix CVE-2022-49866, update the Linux kernel to the latest stable version that includes the patch.
Which versions of Linux kernel are affected by CVE-2022-49866?
CVE-2022-49866 affects versions of the Linux kernel prior to the application of the fix, specifically those using the MHI driver.
What impact does CVE-2022-49866 have on systems?
CVE-2022-49866 can lead to a memory leak within the MHI driver, potentially impacting system performance.
Is CVE-2022-49866 exploitable remotely?
CVE-2022-49866 is not directly exploitable remotely as it requires local access to exploit the memory leak.