CVE-2024-43861 net: usb: qmi_wwan: fix memory leak for not ip packets

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Memory Leak Fixes for CVEs in MediaTek and USB Drivers Two vulnerabilities were addressed in the MediaTek and USB drivers, specifically CVE-2022-49108 and CVE-2024-43861. CVE-2022-49108, related to memory leaks in the MediaTek clk probe, was published on February 26, 2025, while CVE-2024-43861, concerning memory leaks for non-IP packets in the qmi_wwan driver, was published on August 20, 2024. 3 sources 39