CVE-2022-50830Missing Release of Memory after Effective Lifetime in Linux

7 documents6 sources
Severity
N/A
No vector
EPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 30

Description

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() hd44780_probe() allocates a memory chunk for hd with kzalloc() and makes "lcd->drvdata->hd44780" point to it. When we call hd44780_remove(), we should release all relevant memory and resource. But "lcd->drvdata ->hd44780" is not released, which will lead to a memory leak. We should release the "lcd->drvdata->hd44780" in hd44780_remove() to fix the memory leak

Affected Packages4 packages

Linuxlinux/linux_kernel5.11.05.15.100+2
Debianlinux/linux_kernel< 6.1.20-1+2
CVEListV5linux/linux718e05ed92ecac0d9d3954bcc8064527c3ce75658311961a1724bfc64390c539dedc31e067a80315+4
debiandebian/linux< linux 6.1.20-1 (bookworm)

🔴Vulnerability Details

3
OSV
CVE-2022-50830: In the Linux kernel, the following vulnerability has been resolved: auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() hd44780_probe()2025-12-30
GHSA
GHSA-xr5c-xjq3-4hf7: In the Linux kernel, the following vulnerability has been resolved: auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() hd44780_probe2025-12-30
OSV
auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()2025-12-30

📋Vendor Advisories

2
Red Hat
kernel: auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()2025-12-30
Debian
CVE-2022-50830: linux - In the Linux kernel, the following vulnerability has been resolved: auxdisplay:...2022

🕵️Threat Intelligence

1
Wiz
CVE-2022-50830 Impact, Exploitability, and Mitigation Steps | Wiz