CVE-2022-49105

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49105
In the Linux kernel, the following vulnerability has been resolved: staging: wfx: fix an error handling in wfx_init_common() One error handler of wfx_init_common() return without calling ieee80211_free_hw(hw), which may result in memory leak. And I add one err label to unify the error handler, which is useful for the subsequent changes.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/60f1d3c92dc1ef1026e5b917a329a7fa947da036 Patch
https://git.kernel.org/stable/c/86efcb524ae1889ae73f2a2f0bb7fff2ec757ab0 Patch
https://git.kernel.org/stable/c/93498c6e775ae91732a8109dba1bdcd324908f84 Patch
https://git.kernel.org/stable/c/9727912e906762a63c1a667c84731d3427653f88 Patch
https://git.kernel.org/stable/c/ab0fed1fa744173433cfd1dbaf9239f200ded650 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 21:34

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: staging: wfx: corrijo un error de manejo en wfx_init_common() Un controlador de errores de wfx_init_common() retorna sin llamar a ieee80211_free_hw(hw), lo que puede provocar una pérdida de memoria. Y agrego una etiqueta err para unificar el controlador de errores, lo que es útil para los cambios posteriores.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/60f1d3c92dc1ef1026e5b917a329a7fa947da036 - () https://git.kernel.org/stable/c/60f1d3c92dc1ef1026e5b917a329a7fa947da036 - Patch
References () https://git.kernel.org/stable/c/86efcb524ae1889ae73f2a2f0bb7fff2ec757ab0 - () https://git.kernel.org/stable/c/86efcb524ae1889ae73f2a2f0bb7fff2ec757ab0 - Patch
References () https://git.kernel.org/stable/c/93498c6e775ae91732a8109dba1bdcd324908f84 - () https://git.kernel.org/stable/c/93498c6e775ae91732a8109dba1bdcd324908f84 - Patch
References () https://git.kernel.org/stable/c/9727912e906762a63c1a667c84731d3427653f88 - () https://git.kernel.org/stable/c/9727912e906762a63c1a667c84731d3427653f88 - Patch
References () https://git.kernel.org/stable/c/ab0fed1fa744173433cfd1dbaf9239f200ded650 - () https://git.kernel.org/stable/c/ab0fed1fa744173433cfd1dbaf9239f200ded650 - Patch

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 21:34

NVD link : CVE-2022-49105

Mitre link : CVE-2022-49105

CVE.ORG link : CVE-2022-49105

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime