CVE-2022-49881: wifi: cfg80211: fix memory leak in query_regdb_file()
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: fix memory leak in queryregdbfile()
In the function queryregdbfile() the alpha2 parameter is duplicated using kmemdup() and subsequently freed in regdbfwcb(). However, requestfirmwarenowait() can fail without calling regdbfwcb() and thus leak memory.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49881?
CVE-2022-49881 has been classified with medium severity due to its potential impact on system stability.
How do I fix CVE-2022-49881?
To fix CVE-2022-49881, update to the latest version of the Linux kernel where this vulnerability has been patched.
What systems are affected by CVE-2022-49881?
CVE-2022-49881 affects various versions of the Linux kernel, particularly those utilizing the cfg80211 subsystem related to Wi-Fi.
What type of vulnerability is CVE-2022-49881?
CVE-2022-49881 is a memory leak vulnerability that occurs in the query_regdb_file() function of the Linux kernel.
Can CVE-2022-49881 be exploited remotely?
CVE-2022-49881 does not appear to be exploitable remotely as it requires specific kernel operations to trigger the memory leak.