CVE-2022-49225: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49225 affects the Linux kernel's mt76 wireless driver, specifically in the mt7921s component. The vulnerability was discovered in the mt7921loadpatch function where a potential memory leak could occur. The issue was resolved by ensuring proper firmware data release at the end of the mt7921loadpatch routine (Kernel Git).

The vulnerability exists in the mt7921loadpatch function within the mt76 wireless driver for mt7921s devices. The issue stems from improper resource cleanup in error handling paths. The fix involves modifying the control flow to ensure firmware data is always released at the end of the mt7921loadpatch routine, regardless of the execution path. This patch fixes an earlier commit (78b217580c509) that addressed bus hang issues with wrong privileges (Kernel Git).

The memory leak vulnerability could lead to gradual system memory exhaustion over time, potentially affecting system stability and performance in systems using the affected mt7921s wireless driver (NVD).

The issue has been fixed in the Linux kernel through a patch that ensures proper firmware data release. Users should update their Linux kernel to a version that includes this fix (Kernel Git).