Strix
26.1K

CVE-2022-50660

UnknownEPSS 0.21%

Last modified

CVE-2022-50660 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2200: fix memory leak in ipw_wdev_init() In the error path of ipw_wdev_init(), exception value is returned, and the memory applied for in the function is not released. Also the memory is not released in ipw_pci_probe(). EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2200: fix memory leak in ipw_wdev_init() In the error path of ipw_wdev_init(), exception value is returned, and the memory applied for in the function is not released. Also the memory is not released in ipw_pci_probe(). As a result, memory leakage occurs. So memory release needs to be added to the error path of ipw_wdev_init().

Metrics

EPSS Probability
0.21%

11.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a3caa99e6c68f466c13cfea74097f6fb01b45e25, < 75d20ba9506eb90d92e660e04dd887ff1495fcc3; >= a3caa99e6c68f466c13cfea74097f6fb01b45e25, < fb3517b92a45c8004ac26250ae041a24eb23fef1; >= a3caa99e6c68f466c13cfea74097f6fb01b45e25, < 112c1af02b8f535baf42ef9d807aea963705ef15; >= a3caa99e6c68f466c13cfea74097f6fb01b45e25, < 8a2eb9d9d0c1535bc8e22840193bff4cdcac878b; >= a3caa99e6c68f466c13cfea74097f6fb01b45e25, < 9424ea9d557ef41d86eb40b6349ae991c3dcff89; >= a3caa99e6c68f466c13cfea74097f6fb01b45e25, < 62ec7e8bf42f1542f966dda687c654aae81718c8; >= a3caa99e6c68f466c13cfea74097f6fb01b45e25, < 1f590fb3d14e5db3a9e06ee141b1685c429278ce; >= a3caa99e6c68f466c13cfea74097f6fb01b45e25, < 9fe21dc626117fb44a8eb393713a86a620128ce3
LinuxLinux2.6.33

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2022-50660?
In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2200: fix memory leak in ipw_wdev_init() In the error path of ipw_wdev_init(), exception value is returned, and the memory applied for in the function is not released. Also the memory is not released in ipw_pci_probe(). As a result, memory leakage occurs. So memory release needs to be added to the error path of ipw_wdev_init().
How severe is CVE-2022-50660?
Severity scoring for CVE-2022-50660 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2022-50660?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2022

View all 2022CVEs →

Are you affected by CVE-2022-50660?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST