CVE-2022-50146

PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors

MEDIUM

5.5

CVSS Score

Published: June 18, 2025 at 11:03 AM UTC

Updated: June 17, 2026 at 05:22 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors If dw_pcie_ep_init() fails to perform any action after the EPC memory is initialized and the MSI memory region is allocated, the latter parts won't be undone thus causing a memory leak. Add a cleanup-on-error path to fix these leaks. [bhelgaas: commit log]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.16 ≤ v < 5.10.1374.16 ≤ v < 5.15.614.16 ≤ v < 5.18.184.16 ≤ v < 5.19.24.16 ≤ v < 6.05.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.22fd0c9d966cc11bb5f73556dd788d12f501d87554.16

Vendor states this is fixed in 2d546db5c80c45cac3ccd929550244fd58f4ff58 (fixed)

Vendor states this is fixed in 3b453f5d06d1f1d6b20a75ea51dc7b53ae78f479 (fixed)

Vendor states this is fixed in 8161e9626b50892eaedbd8070ecb1586ecedb109 (fixed)

Vendor states this is fixed in b03a8f1264ea8c363bec9ef6e37b467f27cb04ea (fixed)

Vendor states this is fixed in e7599a5974d4c64eaae8009c3f2e47b9e3223e07 (fixed)

Vendor states this is fixed in 4.16 (unaffected)

Vendor states this is fixed in 5.10.137 (unaffected)

Vendor states this is fixed in 5.15.61 (unaffected)

Vendor states this is fixed in 5.18.18 (unaffected)

Vendor states this is fixed in 5.19.2 (unaffected)

Vendor states this is fixed in 6.0 (unaffected)