SECUFOCUSNOW
Home›CVE index›CVE-2022-50758
Review reviewHigh

CVE-2022-50758

Linux

In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix potential memory leak In function device_init_td0_ring, memory is allocated for member td_info of priv->apTD0Rings[i], with i increasing from 0. In case of allocation failure, the memory is freed in reversed order, with i decreasing to 0. However, the case i=0 is left out and thus memory is leaked. Modify the memory freeing loop to include the case i=0.

CVSS
7.8
EPSS
0.18%
8.07% percentile
CISA KEV
Not listed
Published
2025.12.24
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.18%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix potential memory leak In function device_init_td0_ring, memory is allocated for member td_info of priv->apTD0Rings[i], with i increasing from 0. In case of allocation failure, the memory is freed in reversed order, with i decreasing to 0. However, the case i=0 is left out and thus memory is leaked. Modify the memory freeing loop to include the case i=0.

Affected product and versions

Product
Linux
Affected versions
>= 5341ee0adb17d12a96dc5344e0d267cd12b52135 < e741e38aa98704fbb959650ecd270b71b2670680, >= 5341ee0adb17d12a96dc5344e0d267cd12b52135 < 16a45e78a687eb6c69acc4e62b94b6508b0bfbda, >= 5341ee0adb17d12a96dc5344e0d267cd12b52135 < 1b3cebeca99e8e0aa4fa57faac8dbf41e967317a, >= 5341ee0adb17d12a96dc5344e0d267cd12b52135 < ff8551d411f12b5abc5ca929ab87643afa8a9588, >= 5341ee0adb17d12a96dc5344e0d267cd12b52135 < fb5f569bcda8f87bd47d8030bfae343d757fa3ea, >= 5341ee0adb17d12a96dc5344e0d267cd12b52135 < cfdf139258614ef65b0f68b857ada5328fb7c0e5, >= 5341ee0adb17d12a96dc5344e0d267cd12b52135 < c8ff91535880d41b49699b3829fb6151942de29e, >= 4.18
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2022-50758 — Linux | SECUFOCUS NOW