CVE-2022-49230: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a memory leak vulnerability (CVE-2022-49230) was identified in the mt7915mcuadd_sta routine. The issue occurs when allocated skb (socket buffer) is not properly freed in case of failures. This vulnerability affects the MediaTek MT76 wireless driver, specifically the MT7915 chipset implementation (Kernel Git).

The vulnerability stems from missing cleanup code in error handling paths within the mt7915mcuaddsta function. When certain operations like mt7915mcustawtbltlv() or mt7915mcuaddgroup() fail, the allocated socket buffer (skb) is not properly freed before returning, leading to memory leaks. The fix involves adding proper cleanup code by calling devkfreeskb() in the error paths (Kernel Git).

The memory leak can lead to gradual system memory depletion over time as socket buffers are not properly freed when errors occur in the wireless driver. This could potentially result in degraded system performance or stability issues in systems using the affected MT7915 wireless hardware.

The vulnerability has been fixed by adding proper cleanup code in the error handling paths. The fix ensures that allocated socket buffers are freed when operations fail. Users should update their Linux kernel to a version containing the fix, which was implemented in commit a43736cd12d82913102eb49cb56787a5553e028f (Kernel Git).