CVE-2022-49105

staging: wfx: fix an error handling in wfx_init_common()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: Aug 12, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: wfx: fix an error handling in wfx_init_common()

One error handler of wfx_init_common() return without calling ieee80211_free_hw(hw), which may result in memory leak. And I add one err label to unify the error handler, which is useful for the subsequent changes.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	354d6ca9d99790e037bf06f093634e851d1253ee to before 93498c6e775ae91732a8109dba1bdcd324908f84Affected 354d6ca9d99790e037bf06f093634e851d1253ee to before 86efcb524ae1889ae73f2a2f0bb7fff2ec757ab0Affected 354d6ca9d99790e037bf06f093634e851d1253ee to before ab0fed1fa744173433cfd1dbaf9239f200ded650Affected 354d6ca9d99790e037bf06f093634e851d1253ee to before 9727912e906762a63c1a667c84731d3427653f88Affected 354d6ca9d99790e037bf06f093634e851d1253ee to before 60f1d3c92dc1ef1026e5b917a329a7fa947da036Affected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.111 through 5.10.Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

354d6ca9d99790e037bf06f093634e851d1253ee to before 93498c6e775ae91732a8109dba1bdcd324908f84Affected
354d6ca9d99790e037bf06f093634e851d1253ee to before 86efcb524ae1889ae73f2a2f0bb7fff2ec757ab0Affected
354d6ca9d99790e037bf06f093634e851d1253ee to before ab0fed1fa744173433cfd1dbaf9239f200ded650Affected
354d6ca9d99790e037bf06f093634e851d1253ee to before 9727912e906762a63c1a667c84731d3427653f88Affected
354d6ca9d99790e037bf06f093634e851d1253ee to before 60f1d3c92dc1ef1026e5b917a329a7fa947da036Affected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.111 through 5.10.*Not affected
5.15.34 through 5.15.*Not affected
5.16.20 through 5.16.*Not affected
5.17.3 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.