In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix some erroneous memory clean-up loops In some initialization functions of this driver, memory is allocated with 'i' acting as an index variable and increasing from 0. The commit in "Fixes" introduces some clean-up codes in case of allocation failure, which free memory in reverse order with 'i' decreasing to 0. However, there are some problems: - The case i=0 is left out. Thus memory is leaked. - In case memory allocation fails right from the start, the memory freeing loops will start with i=-1 and invalid memory locations will be accessed. One of these loops has been fixed in commit c8ff91535880 ("staging: vt6655: fix potential memory leak"). Fix the remaining erroneous loops.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/2a2db520e3ca5aafba7c211abfd397666c9b5f9d cve-icon cve-icon
https://git.kernel.org/stable/c/637672a71f5016a40b0a6c0f3c8ad25eacedc8c3 cve-icon cve-icon
https://git.kernel.org/stable/c/88b9cc60f26e8a05d1ddbddf91b09ca2915f20e0 cve-icon cve-icon
https://git.kernel.org/stable/c/95ac62e8545be2b0a8cae0beef7c682e2e470e48 cve-icon cve-icon
https://git.kernel.org/stable/c/a9e9806d1c315bc50dce05479a079b9a104474b8 cve-icon cve-icon
https://git.kernel.org/stable/c/ed11b73c963292e7b49c0f37025c58ed3b7921d6 cve-icon cve-icon
https://git.kernel.org/stable/c/f19e5b7df54590c831f350381963f25585c8f7d5 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091714-CVE-2022-50355-11ce@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50355 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50355 cve-icon
History

Thu, 18 Sep 2025 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 18 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 17 Sep 2025 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix some erroneous memory clean-up loops In some initialization functions of this driver, memory is allocated with 'i' acting as an index variable and increasing from 0. The commit in "Fixes" introduces some clean-up codes in case of allocation failure, which free memory in reverse order with 'i' decreasing to 0. However, there are some problems: - The case i=0 is left out. Thus memory is leaked. - In case memory allocation fails right from the start, the memory freeing loops will start with i=-1 and invalid memory locations will be accessed. One of these loops has been fixed in commit c8ff91535880 ("staging: vt6655: fix potential memory leak"). Fix the remaining erroneous loops.
Title staging: vt6655: fix some erroneous memory clean-up loops
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-17T14:56:08.356Z

Updated: 2025-09-17T14:56:08.356Z

Reserved: 2025-09-17T14:53:06.993Z

Link: CVE-2022-50355

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-17T15:15:34.150

Modified: 2025-09-18T13:43:34.310

Link: CVE-2022-50355

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-17T00:00:00Z

Links: CVE-2022-50355 - Bugzilla