CVE-2022-49817 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: mhi: Fix memory leak in mhi_net_dellink() MHI driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters network device, which causes a memory leak. This patch calls free_netdev() to fix it since netdev_priv is used after unregister.
A memory leak vulnerability has been identified in the Linux kernel's MHI network driver. The issue arises because the driver registers a network device without the 'needs_free_netdev' flag and fails to call 'free_netdev()' when unregistering the device. This oversight leads to a memory leak. The vulnerability has been addressed by modifying the driver to call 'free_netdev()', as 'netdev_priv' is used after the device is unregistered.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/25a270343b0f16e1f6e65f541a15975a35e238ff | kernel.org | Patch |
| https://git.kernel.org/stable/c/88da008e5e2f9753726ea5a51ef2eb144e9de927 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f7c125bd79f50ec6094761090be81d02726ec6f4 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.14, < 5.15.80 >= 5.16, < 6.0.10 6.1 rc1 6.1 rc2 6.1 rc3 6.1 rc4 6.1 rc5 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 7, 2025 | Initial Analysis | [email protected] |
| May 1, 2025 | New CVE Received | kernel.org |