Memory Leak Vulnerability in Linux Kernel: CVE-2022-50416
Summary
CVE-2022-50416: In the Linux kernel, the following vulnerability has been resolved: irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() If of_iomap() failed, 'aic' should be freed before return. Affects linux versions < 6.1.4-1. Fixed in 6.1.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and security features. However, like any complex software, it can have vulnerabilities. CVE-2022-50416 specifically affects the Linux kernel versions prior to 6.1.4-1, where a memory leak can occur in the irqchip/wpcm450 component, potentially leading to resource exhaustion.
Vulnerability Detail
CVE-2022-50416 is a vulnerability found in the Linux kernel, specifically in the irqchip/wpcm450 module. The issue arises when the function 'of_iomap()' fails during the initialization process in 'wpcm450_aic_of_init()'. If this function fails, the allocated memory for 'aic' is not freed, leading to a memory leak. This can result in increased memory usage over time, potentially exhausting system resources and affecting system stability and performance.
How To Fix
Minimum fixed version
6.1.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating to the latest version of the Linux kernel.
Conclusion
CVE-2022-50416 is a significant vulnerability in the Linux kernel that can lead to memory leaks and system instability. It is crucial for users to update their systems to the patched version to mitigate any risks associated with this vulnerability.
See every vulnerability recorded for linux →
FAQ
CVE-2022-50416 is a memory leak vulnerability in the Linux kernel's irqchip/wpcm450 module, which can lead to resource exhaustion.
If exploited, this vulnerability can cause increased memory usage, potentially leading to system instability and performance degradation.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor vulnerabilities without requiring installation.
While there are no specific workarounds, it is advisable to monitor your system's memory usage and apply the update as soon as possible.
More details can be found in the official CVE database or by visiting the source link provided in the vulnerability report.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
