Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-50658

Опубликовано: 09 дек. 2025
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never free the speedbin buffer. This commit fixes the error path to always free the speedbin buffer.

A memory leak vulnerability was found in the Qualcomm cpufreq driver in the Linux kernel. When the speedbin length is incorrect, the error handling path fails to free the allocated speedbin buffer, leading to a memory leak. Over time, this can cause resource exhaustion and system instability.

Отчет

This is a memory leak issue in the Qualcomm cpufreq driver that occurs only in error paths when the speedbin length is invalid. The impact is limited as it requires specific hardware conditions to trigger and affects only Qualcomm-based systems.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelFix deferred
Red Hat Enterprise Linux 9kernel-rtFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-771
https://bugzilla.redhat.com/show_bug.cgi?id=2420335kernel: cpufreq: qcom: fix memory leak in error path

EPSS

Процентиль: 12%
0.00218
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

ubuntu
8 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never free the speedbin buffer. This commit fixes the error path to always free the speedbin buffer.

nvd
8 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never free the speedbin buffer. This commit fixes the error path to always free the speedbin buffer.

debian
8 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: c ...

github
8 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never free the speedbin buffer. This commit fixes the error path to always free the speedbin buffer.

CVSS3: 5.5
fstec
почти 4 года назад

Уязвимость функции qcom_cpufreq_krait_name_version() модуля drivers/cpufreq/qcom-cpufreq-nvmem.c драйвера масштабирования частоты ЦП ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 12%
0.00218
Низкий

5.5 Medium

CVSS3