CVE-2022-50513
published 2025-10-07CVE-2022-50513: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() In…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
In rtw_init_cmd_priv(), if `pcmdpriv->rsp_allocated_buf` is allocated
in failure, then `pcmdpriv->cmd_allocated_buf` will be not properly
released. Besides, considering there are only two error paths and the
first one can directly return, so we do not need implicitly jump to the
`exit` tag to execute the error handler.
So this patch added `kfree(pcmdpriv->cmd_allocated_buf);` on the error
path to release the resource and simplified the return logic of
rtw_init_cmd_priv(). As there is no proper device to test with, no runtime
testing was performed.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < e5d8f05edb36fc4ab15beec62cb6ab62f5a60fe2 | e5d8f05edb36fc4ab15beec62cb6ab62f5a60fe2 |
| linux | linux | >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < e6cc39db24a63f68314473621020ed8cad7be423 | e6cc39db24a63f68314473621020ed8cad7be423 |
| linux | linux | >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < 39bef9c6a91bbb790d04c1347cfeae584541fb6a | 39bef9c6a91bbb790d04c1347cfeae584541fb6a |
| linux | linux | >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < a5be64ff6d21f7805a91e6d81f53fc19cd9f0fae | a5be64ff6d21f7805a91e6d81f53fc19cd9f0fae |
| linux | linux | >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < 8db6ca84eee0ac258706f3fca54f7c021cb159ef | 8db6ca84eee0ac258706f3fca54f7c021cb159ef |
| linux | linux | >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b < 708056fba733a73d926772ea4ce9a42d240345da | 708056fba733a73d926772ea4ce9a42d240345da |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 4.12 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.5 < 5.10.150 | 5.10.150 |
| linux | linux_kernel | >= 6.0 < 6.0.3 | 6.0.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
vendor_redhat·2025-10-07·CVSS 5.5
CVE-2022-50513 [MEDIUM] kernel: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
kernel: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
In rtw_init_cmd_priv(), if `pcmdpriv->rsp_allocated_buf` is allocated
in failure, then `pcmdpriv->cmd_allocated_buf` will be not properly
released. Besides, considering there are only two error paths and the
first one can directly return, so we do not need implicitly jump to the
`exit` tag to execute the error handler.
So this patch added `kfree(pcmdpriv->cmd_allocated_buf);` on the error
path to release the resource and simplified the return logic of
rtw_init_cmd_priv(). As there is no proper device to test with, no runtime
testing was performed.
Package: kernel (Red Hat E
Debian
CVE-2022-50513: linux - In the Linux kernel, the following vulnerability has been resolved: staging: rt...
vendor_debian·2022·CVSS 5.5
CVE-2022-50513 [MEDIUM] CVE-2022-50513: linux - In the Linux kernel, the following vulnerability has been resolved: staging: rt...
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() In rtw_init_cmd_priv(), if `pcmdpriv->rsp_allocated_buf` is allocated in failure, then `pcmdpriv->cmd_allocated_buf` will be not properly released. Besides, considering there are only two error paths and the first one can directly return, so we do not need implicitly jump to the `exit` tag to execute the error handler. So this patch added `kfree(pcmdpriv->cmd_allocated_buf);` on the error path to release the resource and simplified the return logic of rtw_init_cmd_priv(). As there is no proper device to test with, no runtime testing was performed.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved
GHSA
GHSA-vvwr-r28w-f48x: In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
In rtw_in
ghsa_unreviewed·2025-10-07
CVE-2022-50513 [MEDIUM] CWE-401 GHSA-vvwr-r28w-f48x: In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
In rtw_in
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
In rtw_init_cmd_priv(), if `pcmdpriv->rsp_allocated_buf` is allocated
in failure, then `pcmdpriv->cmd_allocated_buf` will be not properly
released. Besides, considering there are only two error paths and the
first one can directly return, so we do not need implicitly jump to the
`exit` tag to execute the error handler.
So this patch added `kfree(pcmdpriv->cmd_allocated_buf);` on the error
path to release the resource and simplified the return logic of
rtw_init_cmd_priv(). As there is no proper device to test with, no runtime
testing was performed.
OSV
CVE-2022-50513: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() In rtw_init
osv·2025-10-07·CVSS 5.5
CVE-2022-50513 [MEDIUM] CVE-2022-50513: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() In rtw_init
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() In rtw_init_cmd_priv(), if `pcmdpriv->rsp_allocated_buf` is allocated in failure, then `pcmdpriv->cmd_allocated_buf` will be not properly released. Besides, considering there are only two error paths and the first one can directly return, so we do not need implicitly jump to the `exit` tag to execute the error handler. So this patch added `kfree(pcmdpriv->cmd_allocated_buf);` on the error path to release the resource and simplified the return logic of rtw_init_cmd_priv(). As there is no proper device to test with, no runtime testing was performed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/39bef9c6a91bbb790d04c1347cfeae584541fb6ahttps://git.kernel.org/stable/c/708056fba733a73d926772ea4ce9a42d240345dahttps://git.kernel.org/stable/c/8db6ca84eee0ac258706f3fca54f7c021cb159efhttps://git.kernel.org/stable/c/a5be64ff6d21f7805a91e6d81f53fc19cd9f0faehttps://git.kernel.org/stable/c/e5d8f05edb36fc4ab15beec62cb6ab62f5a60fe2https://git.kernel.org/stable/c/e6cc39db24a63f68314473621020ed8cad7be423
2025-10-07
Published