CVE-2022-50418CWE-401

CVE-2022-50418

Medium · published September 18, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()

mhi_alloc_controller() allocates a memory space for mhi_ctrl. When gets

some error, mhi_ctrl should be freed with mhi_free_controller(). But

when ath11k_mhi_read_addr_from_dt() fails, the function returns without

calling mhi_free_controller(), which will lead to a memory leak.

We can fix it by calling mhi_free_controller() when

ath11k_mhi_read_addr_from_dt() fails.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2025-09-18T20:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 5.19.175.19.17
linux/linux_kernel≥ 6.0, < 6.0.36.0.3
References (3)
EPSS history
Timeline
  • 18 SEP 16:04Z
    wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()
    cvelistv5