CVE-2022-49867: net: wwan: iosm: fix memory leak in ipc_wwan_dellink
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: iosm: fix memory leak in ipcwwandellink
IOSM driver registers network device without setting the needsfreenetdev flag, and does NOT call freenetdev() when unregisters network device, which causes a memory leak.
This patch sets needsfreenetdev to true when registers network device, which makes netdev subsystem call freenetdev() automatically after unregisternetdevice().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49867?
CVE-2022-49867 has been classified as a medium severity vulnerability due to the potential for memory leaks.
How do I fix CVE-2022-49867?
To fix CVE-2022-49867, ensure that your Linux kernel is updated to the latest patched version that resolves this vulnerability.
What systems are affected by CVE-2022-49867?
CVE-2022-49867 affects all versions of the Linux kernel that include the IOSM driver registering network devices improperly.
What are the potential consequences of CVE-2022-49867?
The potential consequences of CVE-2022-49867 include degraded system performance and resource exhaustion due to memory leaks.
Is CVE-2022-49867 exploitable remotely?
CVE-2022-49867 is not directly exploitable remotely; it requires local access to the affected system for exploitation.