CVE-2022-49817

In the Linux kernel, the following vulnerability has been resolved:

net: mhi: Fix memory leak in mhi_net_dellink()

MHI driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters network device, which causes a memory leak.

This patch calls free_netdev() to fix it since netdev_priv is used after unregister.

This patch fixes a memory leak in the MHI (Modem Host Interface) network driver that occurred when a network device was unregistered without freeing its allocated structure. The driver failed to call free_netdev() after unregister_netdev(), leading to persistent kernel memory consumption each time a device was detached. The issue affects systems using WWAN devices over MHI but does not allow privilege escalation or corruption—only gradual memory exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.