CVE-2022-50882
published 2025-12-30CVE-2022-50882: In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was allocated…
PriorityP418low3.3
EPSS
0.17%
7.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix memory leak in uvc_gpio_parse
Previously the unit buffer was allocated before checking the IRQ for
privacy GPIO. In case of error, the unit buffer was leaked.
Allocate the unit buffer after the IRQ to avoid it.
Addresses-Coverity-ID: 1474639 ("Resource leak")
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < 6c5da92103bddd1f0c36cb69446ff7cae3043986 | 6c5da92103bddd1f0c36cb69446ff7cae3043986 |
| linux | linux | >= 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < deb8f32ae4b10a48c433f2da1b1159521ac24674 | deb8f32ae4b10a48c433f2da1b1159521ac24674 |
| linux | linux | >= 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < 4a7ae8d982a89b3b43b36ec7d62a2e3d06ffa16e | 4a7ae8d982a89b3b43b36ec7d62a2e3d06ffa16e |
| linux | linux | >= 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < f0f078457f18f10696888f8d0e6aba9deb9cde92 | f0f078457f18f10696888f8d0e6aba9deb9cde92 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 5.12.0 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16.0 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.20.0 < 6.0.3 | 6.0.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse
vendor_redhat·2025-12-30·CVSS 3.3
CVE-2022-50882 [LOW] CWE-772 kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse
kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix memory leak in uvc_gpio_parse
Previously the unit buffer was allocated before checking the IRQ for
privacy GPIO. In case of error, the unit buffer was leaked.
Allocate the unit buffer after the IRQ to avoid it.
Addresses-Coverity-ID: 1474639 ("Resource leak")
A memory leak was found in the UVC video driver's GPIO parsing code. When IRQ acquisition fails for a privacy GPIO, the previously allocated unit buffer is not freed, causing a memory leak.
Statement: This leak occurs only when probing UVC cameras with privacy GPIOs that fail IRQ acquisition. The impact is limited to minor memory consumption during camera enumeration failures.
Package:
Debian
CVE-2022-50882: linux - In the Linux kernel, the following vulnerability has been resolved: media: uvcv...
vendor_debian·2022
CVE-2022-50882 CVE-2022-50882: linux - In the Linux kernel, the following vulnerability has been resolved: media: uvcv...
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it. Addresses-Coverity-ID: 1474639 ("Resource leak")
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
OSV
media: uvcvideo: Fix memory leak in uvc_gpio_parse
osv·2025-12-30
CVE-2022-50882 media: uvcvideo: Fix memory leak in uvc_gpio_parse
media: uvcvideo: Fix memory leak in uvc_gpio_parse
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix memory leak in uvc_gpio_parse
Previously the unit buffer was allocated before checking the IRQ for
privacy GPIO. In case of error, the unit buffer was leaked.
Allocate the unit buffer after the IRQ to avoid it.
Addresses-Coverity-ID: 1474639 ("Resource leak")
GHSA
GHSA-7rr3-6945-h32g: In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix memory leak in uvc_gpio_parse
Previously the unit buffer wa
ghsa_unreviewed·2025-12-30
CVE-2022-50882 GHSA-7rr3-6945-h32g: In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix memory leak in uvc_gpio_parse
Previously the unit buffer wa
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix memory leak in uvc_gpio_parse
Previously the unit buffer was allocated before checking the IRQ for
privacy GPIO. In case of error, the unit buffer was leaked.
Allocate the unit buffer after the IRQ to avoid it.
Addresses-Coverity-ID: 1474639 ("Resource leak")
OSV
CVE-2022-50882: In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was
osv·2025-12-30
CVE-2022-50882 CVE-2022-50882: In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it. Addresses-Coverity-ID: 1474639 ("Resource leak")
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50882 kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse
bugzilla·2025-12-30
CVE-2022-50882 [LOW] CVE-2022-50882 kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse
CVE-2022-50882 kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix memory leak in uvc_gpio_parse
Previously the unit buffer was allocated before checking the IRQ for
privacy GPIO. In case of error, the unit buffer was leaked.
Allocate the unit buffer after the IRQ to avoid it.
Addresses-Coverity-ID: 1474639 ("Resource leak")
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123025-CVE-2022-50882-6f82@gregkh/T
Wiz
CVE-2022-50882 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50882 CVE-2022-50882 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50882 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix memory leak in uvc_gpio_parse
Previously the unit buffer was allocated before checking the IRQ for
privacy GPIO. In case of error, the unit buffer was leaked.
Allocate the unit buffer after the IRQ to avoid it.
Addresses-Coverity-ID: 1474639 ("Resource leak")
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Alma Linux
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 7.4
Exploitation Probability (EPSS) N/A
Affected packages and libraries
kernel-64k-debug
kernel-debug-uki-virt
Sources
2025-12-30
Published