CVE-2022-49230: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a memory leak vulnerability (CVE-2022-49230) was identified in the mt7915_mcu_add_sta routine. The issue occurs when allocated skb (socket buffer) is not properly freed in case of failures. This vulnerability affects the MediaTek MT76 wireless driver, specifically the MT7915 chipset implementation (Kernel Git).

The vulnerability stems from missing cleanup code in error handling paths within the mt7915_mcu_add_sta function. When certain operations like mt7915_mcu_sta_wtbl_tlv() or mt7915_mcu_add_group() fail, the allocated socket buffer (skb) is not properly freed before returning, leading to memory leaks. The fix involves adding proper cleanup code by calling dev_kfree_skb() in the error paths (Kernel Git).

The memory leak can lead to gradual system memory depletion over time as socket buffers are not properly freed when errors occur in the wireless driver. This could potentially result in degraded system performance or stability issues in systems using the affected MT7915 wireless hardware.

The vulnerability requires local access to a system with the affected MediaTek MT7915 wireless hardware. While the issue can be triggered through normal wireless operations when certain error conditions occur, it does not appear to be directly exploitable for more severe attacks beyond resource exhaustion.

The vulnerability has been fixed by adding proper cleanup code in the error handling paths. The fix ensures that allocated socket buffers are freed when operations fail. Users should update their Linux kernel to a version containing the fix, which was implemented in commit a43736cd12d82913102eb49cb56787a5553e028f (Kernel Git).