CVE-2022-49881
published 2025-05-01CVE-2022-49881: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in query_regdb_file() In the function query_regdb_file()…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: fix memory leak in query_regdb_file()
In the function query_regdb_file() the alpha2 parameter is duplicated
using kmemdup() and subsequently freed in regdb_fw_cb(). However,
request_firmware_nowait() can fail without calling regdb_fw_cb() and
thus leak memory.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.10-1 (bookworm) | linux 6.0.10-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 007f6c5e6eb45c81ee89368a5f226572ae638831 < 219446396786330937bcd382a7bc4ccd767383bc | 219446396786330937bcd382a7bc4ccd767383bc |
| linux | linux | >= 007f6c5e6eb45c81ee89368a5f226572ae638831 < 0ede1a988299e95d54bd89551fd635980572e920 | 0ede1a988299e95d54bd89551fd635980572e920 |
| linux | linux | >= 007f6c5e6eb45c81ee89368a5f226572ae638831 < e1e12180321f416d83444f2cdc9259e0f5093d35 | e1e12180321f416d83444f2cdc9259e0f5093d35 |
| linux | linux | >= 007f6c5e6eb45c81ee89368a5f226572ae638831 < 38c9fa2cc6bf4b6e1a74057aef8b5cffd23d3264 | 38c9fa2cc6bf4b6e1a74057aef8b5cffd23d3264 |
| linux | linux | >= 007f6c5e6eb45c81ee89368a5f226572ae638831 < e9b5a4566d5bc71cc901be50d1fa24da00613120 | e9b5a4566d5bc71cc901be50d1fa24da00613120 |
| linux | linux | >= 007f6c5e6eb45c81ee89368a5f226572ae638831 < 57b962e627ec0ae53d4d16d7bd1033e27e67677a | 57b962e627ec0ae53d4d16d7bd1033e27e67677a |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 4.15 < 4.19.267 | 4.19.267 |
| linux | linux_kernel | >= 4.20 < 5.4.225 | 5.4.225 |
| linux | linux_kernel | >= 5.11 < 5.15.79 | 5.15.79 |
| linux | linux_kernel | >= 5.16 < 6.0.9 | 6.0.9 |
| linux | linux_kernel | >= 5.5 < 5.10.155 | 5.10.155 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: wifi: cfg80211: fix memory leak in query_regdb_file()
vendor_redhat·2025-05-01·CVSS 5.5
CVE-2022-49881 [MEDIUM] kernel: wifi: cfg80211: fix memory leak in query_regdb_file()
kernel: wifi: cfg80211: fix memory leak in query_regdb_file()
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: fix memory leak in query_regdb_file()
In the function query_regdb_file() the alpha2 parameter is duplicated
using kmemdup() and subsequently freed in regdb_fw_cb(). However,
request_firmware_nowait() can fail without calling regdb_fw_cb() and
thus leak memory.
Statement: A memory leak was fixed in query_regdb_file() where kmemdup()'ed memory for the alpha2 parameter was not freed if request_firmware_nowait() failed before invoking the callback. The issue was resolved by explicitly calling kfree(alpha2) when the firmware request fails synchronously. Since access to this function requires capabilities like CAP_NET_ADMIN or direct kernel interacti
Debian
CVE-2022-49881: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
vendor_debian·2022·CVSS 5.5
CVE-2022-49881 [MEDIUM] CVE-2022-49881: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in query_regdb_file() In the function query_regdb_file() the alpha2 parameter is duplicated using kmemdup() and subsequently freed in regdb_fw_cb(). However, request_firmware_nowait() can fail without calling regdb_fw_cb() and thus leak memory.
Scope: local
bookworm: resolved (fixed in 6.0.10-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.10-1)
sid: resolved (fixed in 6.0.10-1)
trixie: resolved (fixed in 6.0.10-1)
OSV
CVE-2022-49881: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in query_regdb_file() In the function query_regdb_
osv·2025-05-01·CVSS 5.5
CVE-2022-49881 [MEDIUM] CVE-2022-49881: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in query_regdb_file() In the function query_regdb_
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in query_regdb_file() In the function query_regdb_file() the alpha2 parameter is duplicated using kmemdup() and subsequently freed in regdb_fw_cb(). However, request_firmware_nowait() can fail without calling regdb_fw_cb() and thus leak memory.
GHSA
GHSA-fw2p-r2v5-6jjq: In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: fix memory leak in query_regdb_file()
In the function query_regd
ghsa_unreviewed·2025-05-01
CVE-2022-49881 [MEDIUM] CWE-401 GHSA-fw2p-r2v5-6jjq: In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: fix memory leak in query_regdb_file()
In the function query_regd
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: fix memory leak in query_regdb_file()
In the function query_regdb_file() the alpha2 parameter is duplicated
using kmemdup() and subsequently freed in regdb_fw_cb(). However,
request_firmware_nowait() can fail without calling regdb_fw_cb() and
thus leak memory.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0ede1a988299e95d54bd89551fd635980572e920https://git.kernel.org/stable/c/219446396786330937bcd382a7bc4ccd767383bchttps://git.kernel.org/stable/c/38c9fa2cc6bf4b6e1a74057aef8b5cffd23d3264https://git.kernel.org/stable/c/57b962e627ec0ae53d4d16d7bd1033e27e67677ahttps://git.kernel.org/stable/c/e1e12180321f416d83444f2cdc9259e0f5093d35https://git.kernel.org/stable/c/e9b5a4566d5bc71cc901be50d1fa24da00613120
2025-05-01
Published