CVE-2022-49817

Description

In the Linux kernel, the following vulnerability has been resolved: net: mhi: Fix memory leak in mhi_net_dellink() MHI driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters network device, which causes a memory leak. This patch calls free_netdev() to fix it since netdev_priv is used after unregister.

Reserved 2025-05-01 | Published 2025-05-01 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

13adac032982c61bb590669e8e87e51558917ca1 before 88da008e5e2f9753726ea5a51ef2eb144e9de927
affected

13adac032982c61bb590669e8e87e51558917ca1 before 25a270343b0f16e1f6e65f541a15975a35e238ff
affected

13adac032982c61bb590669e8e87e51558917ca1 before f7c125bd79f50ec6094761090be81d02726ec6f4
affected

Default status
affected

5.14
affected

Any version before 5.14
unaffected

5.15.80
unaffected

6.0.10
unaffected

6.1
unaffected

References

git.kernel.org/...c/88da008e5e2f9753726ea5a51ef2eb144e9de927

git.kernel.org/...c/25a270343b0f16e1f6e65f541a15975a35e238ff

git.kernel.org/...c/f7c125bd79f50ec6094761090be81d02726ec6f4

cve.org (CVE-2022-49817)

nvd.nist.gov (CVE-2022-49817)

Download JSON