CVE-2022-49906

In the Linux kernel, the following vulnerability has been resolved:

ibmvnic: Free rwi on reset success

Free the rwi structure in the event that the last rwi in the list processed successfully. The logic in commit 4f408e1fa6e1 ("ibmvnic: retry reset if there are no other resets") introduces an issue that results in a 32 byte memory leak whenever the last rwi in the list gets processed.

A memory leak in the ibmvnic driver allowed 32 bytes of memory to remain allocated after a successful device reset. Triggering this condition requires high privileges, as only root or equivalent users can initiate adapter resets in typical PowerVM environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.