CVE-2022-49105: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49105 is a vulnerability in the Linux kernel's WFX driver that involves a memory leak in the error handling path of the wfx_init_common() function (Kernel Git). The issue was discovered in February 2022 and affects the staging driver for WFX wireless devices.

The vulnerability occurs in the wfx_init_common() function where an error handler returns without calling ieee80211_free_hw(hw), potentially resulting in a memory leak. The issue specifically manifests when the gpio_wakeup initialization fails, and the error path fails to properly clean up allocated resources (Kernel Git).

The vulnerability could lead to memory leaks in the Linux kernel when the WFX driver encounters certain error conditions during device initialization (Kernel Git).

The vulnerability requires local access and occurs during device initialization. It is primarily a reliability issue rather than a security vulnerability that could be actively exploited (Kernel Git).

The issue has been fixed by adding proper error handling through an 'err' label and ensuring ieee80211_free_hw(hw) is called in all error paths. The fix was reviewed by Dan Carpenter and Jérôme Pouiller, and committed to the Linux kernel (Kernel Git).