CVE-2022-49867

medium

Description

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipc_wwan_dellink IOSM driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters network device, which causes a memory leak. This patch sets needs_free_netdev to true when registers network device, which makes netdev subsystem call free_netdev() automatically after unregister_netdevice().

References

https://git.kernel.org/stable/c/f25caaca424703d5a0607310f0452f978f1f78d9

https://git.kernel.org/stable/c/2ce2348c2858d723f7fe389dead9b43b08e0944e

https://git.kernel.org/stable/c/128514b51a5ba2c82f9e4a106f1c10423907618a

Details

Source: Mitre, NVD

Published: 2025-05-01

Updated: 2025-05-07

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00017