CVE-2022-50882
Memory Leak in Linux uvcvideo Driver's GPIO Parsing
Publication date: 2025-12-30
Last updated on: 2025-12-30
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | kernel | * |
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory leak in the Linux kernel's uvcvideo driver related to the uvc_gpio_parse function. The issue occurred because the unit buffer was allocated before checking the IRQ for the privacy GPIO, and if there was an error, the allocated unit buffer was not freed, causing a memory leak. The fix involves allocating the unit buffer only after successfully checking the IRQ to prevent the leak.
How can this vulnerability impact me? :
This vulnerability can lead to a memory leak in the Linux kernel when using the uvcvideo driver. Over time, this could cause increased memory usage and potentially degrade system performance or stability, especially on systems that frequently interact with the affected driver.