CVE-2022-49817: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49817 is a vulnerability discovered in the Linux kernel's MHI (Modem Host Interface) network driver. The vulnerability was disclosed on May 1, 2025, affecting the network device registration process in the Linux kernel (NVD).

The vulnerability stems from a memory leak in the mhi_net_dellink() function of the MHI network driver implementation. Specifically, the driver registers a network device without setting the needs_free_netdev flag and fails to call free_netdev() when unregistering the network device. This oversight occurs because netdev_priv is used after unregister (NVD, Wiz).

The primary impact of this vulnerability is a memory leak in the Linux kernel's MHI network driver. When exploited, it can lead to gradual system resource depletion as memory is not properly freed when network devices are unregistered (Wiz).

The vulnerability has been assigned a CVSS v3 Base Score of 5.5, indicating moderate severity. The attack vector is local, requiring local access to the system (Red Hat).

The vulnerability has been patched by adding a call to free_netdev() in the appropriate location to properly free the network device resources when unregistering. The fix ensures proper memory management by calling free_netdev() since netdev_priv is used after unregister. Various Linux distributions have released patches, including Ubuntu 22.04 LTS and 20.04 LTS (Ubuntu).