CVE-2022-50294

wifi: libertas: fix memory leak in lbs_init_adapter()

MEDIUM
5.5
CVSS Score
Published: September 15, 2025 at 02:45 PM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in lbs_init_adapter() When kfifo_alloc() failed in lbs_init_adapter(), cmd buffer is not released. Add free memory to processing error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.26 ≤ v < 4.14.3082.6.26 ≤ v < 4.19.2762.6.26 ≤ v < 5.10.1732.6.26 ≤ v < 5.15.992.6.26 ≤ v < 5.4.2352.6.26 ≤ v < 6.1.162.6.26 ≤ v < 6.2.32.6.26 ≤ v < 6.34.15 ≤ v < 4.19.2764.20 ≤ v < 5.4.2355.11 ≤ v < 5.15.995.16 ≤ v < 6.1.165.5 ≤ v < 5.10.1736.2 ≤ v < 6.2.32.6.267919b89c8276d657976d4d4d6b7cb58ea1aa08c3
Vendor states this is fixed in 037f84c0bfae5c436c651d0e804264e2648010ec (fixed)
Vendor states this is fixed in 16a03958618fb91bb1bc7077cf3211055162cc2f (fixed)
Vendor states this is fixed in 23b34e08de5c2380414c9d3c33e8235094bcccae (fixed)
Vendor states this is fixed in 4c102ad59bfa66c0f6662af64fa3b9007b02c20f (fixed)
Vendor states this is fixed in 653d13a73e498d0bb6aeaf689aaa960defa7878b (fixed)
Vendor states this is fixed in 98e0ff6980c89239d9e5d3da90d791c2383dc23a (fixed)
Vendor states this is fixed in 9c8f50c7433bdfba1588831c413136ecc3f29f99 (fixed)
Vendor states this is fixed in d46c33f667b05c22bc5c5b69aa730349c4b6fe31 (fixed)
Vendor states this is fixed in 2.6.26 (unaffected)
Vendor states this is fixed in 4.14.308 (unaffected)
Vendor states this is fixed in 4.19.276 (unaffected)
Vendor states this is fixed in 5.10.173 (unaffected)
Vendor states this is fixed in 5.15.99 (unaffected)
Vendor states this is fixed in 5.4.235 (unaffected)
Vendor states this is fixed in 6.1.16 (unaffected)
Vendor states this is fixed in 6.2.3 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/037f84c0bfae5c436c651d0e804264e2648010ec
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/16a03958618fb91bb1bc7077cf3211055162cc2f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/23b34e08de5c2380414c9d3c33e8235094bcccae
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4c102ad59bfa66c0f6662af64fa3b9007b02c20f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/653d13a73e498d0bb6aeaf689aaa960defa7878b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/98e0ff6980c89239d9e5d3da90d791c2383dc23a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9c8f50c7433bdfba1588831c413136ecc3f29f99
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d46c33f667b05c22bc5c5b69aa730349c4b6fe31

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card