Riskcovery

CVE-2022-49817

net: mhi: Fix memory leak in mhi_net_dellink()

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mhi: Fix memory leak in mhi_net_dellink()

MHI driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters network device, which causes a memory leak.

This patch calls free_netdev() to fix it since netdev_priv is used after unregister.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 13adac032982c61bb590669e8e87e51558917ca1 to before 88da008e5e2f9753726ea5a51ef2eb144e9de927Affected
  • 13adac032982c61bb590669e8e87e51558917ca1 to before 25a270343b0f16e1f6e65f541a15975a35e238ffAffected
  • 13adac032982c61bb590669e8e87e51558917ca1 to before f7c125bd79f50ec6094761090be81d02726ec6f4Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.80 through 5.15.*Not affected
  • 6.0.10 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.