CVE-2022-50146

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50146
In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors If dw_pcie_ep_init() fails to perform any action after the EPC memory is initialized and the MSI memory region is allocated, the latter parts won't be undone thus causing a memory leak. Add a cleanup-on-error path to fix these leaks. [bhelgaas: commit log]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2d546db5c80c45cac3ccd929550244fd58f4ff58 Patch
https://git.kernel.org/stable/c/3b453f5d06d1f1d6b20a75ea51dc7b53ae78f479 Patch
https://git.kernel.org/stable/c/8161e9626b50892eaedbd8070ecb1586ecedb109 Patch
https://git.kernel.org/stable/c/b03a8f1264ea8c363bec9ef6e37b467f27cb04ea Patch
https://git.kernel.org/stable/c/e7599a5974d4c64eaae8009c3f2e47b9e3223e07 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Nov 2025, 19:57

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2d546db5c80c45cac3ccd929550244fd58f4ff58 - () https://git.kernel.org/stable/c/2d546db5c80c45cac3ccd929550244fd58f4ff58 - Patch
References () https://git.kernel.org/stable/c/3b453f5d06d1f1d6b20a75ea51dc7b53ae78f479 - () https://git.kernel.org/stable/c/3b453f5d06d1f1d6b20a75ea51dc7b53ae78f479 - Patch
References () https://git.kernel.org/stable/c/8161e9626b50892eaedbd8070ecb1586ecedb109 - () https://git.kernel.org/stable/c/8161e9626b50892eaedbd8070ecb1586ecedb109 - Patch
References () https://git.kernel.org/stable/c/b03a8f1264ea8c363bec9ef6e37b467f27cb04ea - () https://git.kernel.org/stable/c/b03a8f1264ea8c363bec9ef6e37b467f27cb04ea - Patch
References () https://git.kernel.org/stable/c/e7599a5974d4c64eaae8009c3f2e47b9e3223e07 - () https://git.kernel.org/stable/c/e7599a5974d4c64eaae8009c3f2e47b9e3223e07 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: dwc: Desasignar memoria EPC en errores de dw_pcie_ep_init(). Si dw_pcie_ep_init() no realiza ninguna acción después de inicializar la memoria EPC y asignar la región de memoria MSI, estas últimas acciones no se desharán, lo que provocará una fuga de memoria. Se ha añadido una ruta de limpieza en caso de error para corregir estas fugas. [bhelgaas: registro de confirmaciones]
CWE CWE-401
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-17 19:57

NVD link : CVE-2022-50146

Mitre link : CVE-2022-50146

CVE.ORG link : CVE-2022-50146

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime