CVE-2022-49867

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: iosm: fix memory leak in ipc_wwan_dellink

IOSM driver registers network device without setting the needs_free_netdev flag, and does NOT call free_netdev() when unregisters network device, which causes a memory leak.

This patch sets needs_free_netdev to true when registers network device, which makes netdev subsystem call free_netdev() automatically after unregister_netdevice().

This patch fixes a memory leak in the iosm WWAN driver. The driver failed to set needs_free_netdev = true when registering a network device, resulting in the memory not being freed during unregister_netdevice(). This oversight could lead to memory exhaustion over time if interfaces are frequently created and destroyed. The issue causes a kernel memory leak but does not involve privilege escalation, data corruption, or direct denial of service unless heavily exploited over time.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.