Riskcovery

CVE-2022-49866

net: wwan: mhi: fix memory leak in mhi_mbim_dellink

State
Published
Severity
5.5 Medium
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: mhi: fix memory leak in mhi_mbim_dellink

MHI driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters network device, which causes a memory leak.

This patch sets needs_free_netdev to true when registers network device, which makes netdev subsystem call free_netdev() automatically after unregister_netdevice().

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • aa730a9905b7b079ef2fffdab7f15dbb842f5c7c to before 2845bc9070cef0c651987487d84d4813d64675ddAffected
  • aa730a9905b7b079ef2fffdab7f15dbb842f5c7c to before 3cd3ffe952f78ec5dadf300cb58d4b38a0c0106dAffected
  • aa730a9905b7b079ef2fffdab7f15dbb842f5c7c to before 668205b9c9f94d5ed6ab00cce9a46a654c2b5d16Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.79 through 5.15.*Not affected
  • 6.0.9 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.