Memory Leak Vulnerability in Linux Kernel - mt76: mt7921s Package
Summary
CVE-2022-49225: In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921s: fix a possible memory leak in mt7921_load_patch Always release fw data at the end of mt7921_load_patch routine. Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. The mt76: mt7921s package is a driver for MediaTek's wireless chipsets, enabling wireless connectivity. This package is crucial for systems relying on MediaTek hardware, and vulnerabilities within it can lead to significant performance and security issues.
Vulnerability Detail
CVE-2022-49225 is a vulnerability identified in the Linux kernel's mt76: mt7921s driver. It pertains to a potential memory leak in the mt7921_load_patch routine, where firmware data is not properly released. This oversight can lead to increased memory consumption over time, potentially resulting in system instability or crashes. The vulnerability was introduced in earlier versions of the driver and has been addressed in the fixed version 5.17.3-1.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
CVE-2022-49225 is a critical memory leak vulnerability in the Linux kernel's mt76: mt7921s driver, which can lead to significant system issues. Users are encouraged to update their Linux packages to the fixed version 5.17.3-1 to mitigate the risks associated with this vulnerability.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49225 is a vulnerability in the Linux kernel's mt76: mt7921s driver that can cause a memory leak.
This vulnerability can lead to increased memory usage, potentially causing system instability or crashes over time.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
While there are no specific workarounds, it is advisable to monitor your system's memory usage and apply the update as soon as possible.
Detailed information can be found in the official CVE database and through the Linux kernel's release notes.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
