CVE-2022-50537: firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()
In the Linux kernel, the following vulnerability has been resolved:
firmware: raspberrypi: fix possible memory leak in rpifirmwareprobe()
In rpifirmwareprobe(), if mboxrequestchannel() fails, the 'fw' will not be freed through rpifirmwaredelete(), fix this leak by calling kfree() in the error path.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50537?
CVE-2022-50537 is considered to have a medium severity level due to the potential memory leak in the Linux kernel's Raspberry Pi firmware.
How do I fix CVE-2022-50537?
To fix CVE-2022-50537, update the Raspberry Pi Linux kernel firmware to the latest version that contains the security patch.
What systems are affected by CVE-2022-50537?
CVE-2022-50537 affects the Raspberry Pi Linux kernel firmware specifically.
What could happen if CVE-2022-50537 is exploited?
Exploitation of CVE-2022-50537 could lead to resource leaks that may degrade system performance or stability.
Is CVE-2022-50537 relevant to all Raspberry Pi users?
CVE-2022-50537 is particularly relevant to users running the affected version of Raspberry Pi's Linux kernel firmware.