CVE-2022-50537

firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()

published October 7, 2025

CVSS
—
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()

In rpi_firmware_probe(), if mbox_request_channel() fails, the 'fw' will

not be freed through rpi_firmware_delete(), fix this leak by calling

kfree() in the error path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Published
2025-10-07T15:21Z
EPSS history
Timeline
  • 07 OCT 15:21Z
    firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()
    cvelistv5