cbcvebase.
CVE-2022-50469
published 2025-10-01

CVE-2022-50469: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() In rtw_init_drv_sw()…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
4.3th percentile
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() In rtw_init_drv_sw(), there are various init functions are called to populate the padapter structure and some checks for their return value. However, except for the first one error path, the other five error paths do not properly release the previous allocated resources, which leads to various memory leaks. This patch fixes them and keeps the success and error separate. Note that these changes keep the form of `rtw_init_drv_sw()` in "drivers/staging/r8188eu/os_dep/os_intfs.c". As there is no proper device to test with, no runtime testing was performed.

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.0.3-1 (bookworm)linux 6.0.3-1 (bookworm)
linuxlinux
linuxlinux>= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < b4573a2bad3c3e2643ef3939079eb7035a30e6eeb4573a2bad3c3e2643ef3939079eb7035a30e6ee
linuxlinux>= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < 6b2052b365f8035ab7f09ac24b5b499002b298cb6b2052b365f8035ab7f09ac24b5b499002b298cb
linuxlinux>= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < d95d1526d9f06978c1a7186810a5490d72c62742d95d1526d9f06978c1a7186810a5490d72c62742
linuxlinux>= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < 5a5aa9cce621e2c0e25a1e5d72d6be1749167cc05a5aa9cce621e2c0e25a1e5d72d6be1749167cc0
linuxlinux_kernel>= 0 < 6.0.3-16.0.3-1
linuxlinux_kernel>= 0 < 6.0.3-16.0.3-1
linuxlinux_kernel>= 0 < 6.0.3-16.0.3-1
linuxlinux_kernel>= 4.12 < 5.15.755.15.75
linuxlinux_kernel>= 5.16 < 5.19.175.19.17
linuxlinux_kernel>= 6.0 < 6.0.36.0.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.