CVE-2022-50537

firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()

MEDIUM

5.5

CVSS Score

Published: October 7, 2025 at 03:21 PM UTC

Updated: June 17, 2026 at 05:23 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() In rpi_firmware_probe(), if mbox_request_channel() fails, the 'fw' will not be freed through rpi_firmware_delete(), fix this leak by calling kfree() in the error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.10.65 ≤ v < 5.10.1635.13 ≤ v < 5.15.865.13 ≤ v < 6.0.165.13 ≤ v < 6.1.25.13 ≤ v < 6.25.16 ≤ v < 6.0.166.1 ≤ v < 6.1.21e7c57355a3bc617fc220234889e49fe722a63055.10.65 5.1360831f5ae6c713afceb6d29f40899ed112f36059d537afa08e156a0a72562e625506825c2776fcfa

Vendor states this is fixed in 62ac943eb2a9d655e431b9bc98ff6d7bd51a0e49 (fixed)

Vendor states this is fixed in 6757dd2193fe18c5c5fe3050e7f2ff9dcbd1ff34 (fixed)

Vendor states this is fixed in 71d2abab374f707ab8ac8dcef191fd2b3b67b8bd (fixed)

Vendor states this is fixed in 7b51161696e803fd5f9ad55b20a64c2df313f95c (fixed)

Vendor states this is fixed in b308fdedef095aac14569f810d46edf773ea7d1e (fixed)

Vendor states this is fixed in d34742245e4366579f9a80f8cfe4a63248e838e0 (fixed)

Vendor states this is fixed in 5.10.163 (unaffected)

Vendor states this is fixed in 5.13 (unaffected)

Vendor states this is fixed in 5.15.86 (unaffected)

Vendor states this is fixed in 6.0.16 (unaffected)

Vendor states this is fixed in 6.1.2 (unaffected)

Vendor states this is fixed in 6.2 (unaffected)