CVE-2022-50175

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50175
In the Linux kernel, the following vulnerability has been resolved: media: tw686x: Fix memory leak in tw686x_video_init video_device_alloc() allocates memory for vdev, when video_register_device() fails, it doesn't release the memory and leads to memory leak, call video_device_release() to fix this.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0597bcf774896a002edcc7934a9cdbb932b66702 Patch
https://git.kernel.org/stable/c/611f86965df013d6021e6cd0d155b1734ad2cf21 Patch
https://git.kernel.org/stable/c/8b412db51db24dfba22c96948580d4a12f831397 Patch
https://git.kernel.org/stable/c/c142a7531b90c6b0f946c82d3f504b3f36a207df Patch
https://git.kernel.org/stable/c/e0b212ec9d8177d6f7c404315293f6a085d6ee42 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

28 Nov 2025, 14:50

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/0597bcf774896a002edcc7934a9cdbb932b66702 - () https://git.kernel.org/stable/c/0597bcf774896a002edcc7934a9cdbb932b66702 - Patch
References () https://git.kernel.org/stable/c/611f86965df013d6021e6cd0d155b1734ad2cf21 - () https://git.kernel.org/stable/c/611f86965df013d6021e6cd0d155b1734ad2cf21 - Patch
References () https://git.kernel.org/stable/c/8b412db51db24dfba22c96948580d4a12f831397 - () https://git.kernel.org/stable/c/8b412db51db24dfba22c96948580d4a12f831397 - Patch
References () https://git.kernel.org/stable/c/c142a7531b90c6b0f946c82d3f504b3f36a207df - () https://git.kernel.org/stable/c/c142a7531b90c6b0f946c82d3f504b3f36a207df - Patch
References () https://git.kernel.org/stable/c/e0b212ec9d8177d6f7c404315293f6a085d6ee42 - () https://git.kernel.org/stable/c/e0b212ec9d8177d6f7c404315293f6a085d6ee42 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: tw686x: Se corrige la pérdida de memoria en tw686x_video_init video_device_alloc() asigna memoria para vdev, cuando video_register_device() falla, no libera la memoria y provoca una pérdida de memoria, llame a video_device_release() para solucionar esto.

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-28 14:50

NVD link : CVE-2022-50175

Mitre link : CVE-2022-50175

CVE.ORG link : CVE-2022-50175

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime