CVE-2022-49906: ibmvnic: Free rwi on reset success
In the Linux kernel, the following vulnerability has been resolved:
ibmvnic: Free rwi on reset success
Free the rwi structure in the event that the last rwi in the list processed successfully. The logic in commit 4f408e1fa6e1 ("ibmvnic: retry reset if there are no other resets") introduces an issue that results in a 32 byte memory leak whenever the last rwi in the list gets processed.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49906?
CVE-2022-49906 has been classified with a severity rating that warrants attention due to its potential impact on the Linux kernel.
How do I fix CVE-2022-49906?
To remediate CVE-2022-49906, ensure that your Linux kernel is updated to the latest patched version provided by the maintainers.
What systems are affected by CVE-2022-49906?
CVE-2022-49906 affects various versions of the Linux kernel that utilize the ibmvnic driver.
What is the nature of the vulnerability described in CVE-2022-49906?
CVE-2022-49906 involves a flaw in the ibmvnic driver that can lead to improper handling of resources during reset operations.
Has CVE-2022-49906 been fixed?
Yes, the vulnerability presented in CVE-2022-49906 has been resolved in subsequent updates to the Linux kernel.