CVE-2022-50424Missing Release of Memory after Effective Lifetime in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability() Fixed coverity issue with resource leaks at variable "fw" going out of scope leaks the storage it points to mt7921_check_offload_capability(). Addresses-Coverity-ID: 1527806 ("Resource leaks")

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel6.26.2.3
Debianlinux/linux_kernel< 6.3.7-1+1
CVEListV5linux/linux034ae28b56f13dc1f2beb3fa294b455f57ede9cbead3cffd7510dc635d84cd4ea9dd1974fcb69a35+2
debiandebian/linux< linux 6.3.7-1 (forky)

Patches

🔴Vulnerability Details

2
OSV
CVE-2022-50424: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability() Fixed cove2025-10-01
GHSA
GHSA-v347-62gc-cr74: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability() Fixed co2025-10-01

📋Vendor Advisories

2
Red Hat
kernel: wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability()2025-10-01
Debian
CVE-2022-50424: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...2022
CVE-2022-50424 — Linux vulnerability | cvebase