CVE-2022-49105

Summary

In the Linux kernel, the following vulnerability has been resolved:

staging: wfx: fix an error handling in wfx_init_common()

One error handler of wfx_init_common() return without calling ieee80211_free_hw(hw), which may result in memory leak. And I add one err label to unify the error handler, which is useful for the subsequent changes.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa7a91ca5a23dbcc68f04d18ef7e765b1e4f64c7f < 93498c6e775ae91732a8109dba1bdcd324908f84affected
LinuxLinuxa7a91ca5a23dbcc68f04d18ef7e765b1e4f64c7f < 86efcb524ae1889ae73f2a2f0bb7fff2ec757ab0affected
LinuxLinuxa7a91ca5a23dbcc68f04d18ef7e765b1e4f64c7f < ab0fed1fa744173433cfd1dbaf9239f200ded650affected
LinuxLinuxa7a91ca5a23dbcc68f04d18ef7e765b1e4f64c7f < 9727912e906762a63c1a667c84731d3427653f88affected
LinuxLinuxa7a91ca5a23dbcc68f04d18ef7e765b1e4f64c7f < 60f1d3c92dc1ef1026e5b917a329a7fa947da036affected
LinuxLinux5.5affected
LinuxLinux0 < 5.5unaffected
LinuxLinux5.10.111 <= 5.10.*unaffected
LinuxLinux5.15.34 <= 5.15.*unaffected
LinuxLinux5.16.20 <= 5.16.*unaffected
LinuxLinux5.17.3 <= 5.17.*unaffected
LinuxLinux5.18 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References