Riskcovery

CVE-2022-49855

net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg

State
Published
Severity
5.5 Medium
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg

ipc_pcie_read_bios_cfg() is using the acpi_evaluate_dsm() to obtain the wwan power state configuration from BIOS but is not freeing the acpi_object. The acpi_evaluate_dsm() returned acpi_object to be freed.

Free the acpi_object after use.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 7e98d785ae6184c7580a33619dae8b651769ff08 to before 13b1ea861e8aeb701bcfbfe436b943efa2d44029Affected
  • 7e98d785ae6184c7580a33619dae8b651769ff08 to before 7560ceef4d2832a67e8781d924e129c7f542376fAffected
  • 7e98d785ae6184c7580a33619dae8b651769ff08 to before d38a648d2d6cc7bee11c6f533ff9426a00c2a74cAffected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.79 through 5.15.*Not affected
  • 6.0.9 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.