CVE-2022-49817

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: net: mhi: Fix memory leak in mhi_net_dellink() MHI driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters network device, which causes a memory leak. This patch calls free_netdev() to fix it since netdev_priv is used after unregister.

SeverityMedium

CVSS5.5

Exploit probability—

Product

Linux Kernel

PublishedMay 1, 2025

First seenMay 1, 2025

Weakness typeCWE-401CWE-401

How to fix

Update

linux linux_kernel5.15.80, 6.0.10 or later

Patches

git.kernel.org/stable/c/25a270343b0f16e1f6e65f541a15975a35e238ff
git.kernel.org/stable/c/88da008e5e2f9753726ea5a51ef2eb144e9de927
git.kernel.org/stable/c/f7c125bd79f50ec6094761090be81d02726ec6f4

Affected products

Product	Affected versions	Fixed in
linux linux_kernel	5.14 ≤ v < 5.15.80, 5.16 ≤ v < 6.0.10, 6.1	5.15.80, 6.0.10

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.