CVE-2022-50882

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Fix memory leak in uvc_gpio_parse

Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked.

Allocate the unit buffer after the IRQ to avoid it.

Addresses-Coverity-ID: 1474639 ("Resource leak")

Affected Software

VendorProductVersion RangeStatus
LinuxLinux2886477ff98740cc3333cf785e4de0b1ff3d7a28 < 6c5da92103bddd1f0c36cb69446ff7cae3043986affected
LinuxLinux2886477ff98740cc3333cf785e4de0b1ff3d7a28 < deb8f32ae4b10a48c433f2da1b1159521ac24674affected
LinuxLinux2886477ff98740cc3333cf785e4de0b1ff3d7a28 < 4a7ae8d982a89b3b43b36ec7d62a2e3d06ffa16eaffected
LinuxLinux2886477ff98740cc3333cf785e4de0b1ff3d7a28 < f0f078457f18f10696888f8d0e6aba9deb9cde92affected
LinuxLinux5.12affected
LinuxLinux0 < 5.12unaffected
LinuxLinux5.15.75 <= 5.15.*unaffected
LinuxLinux5.19.17 <= 5.19.*unaffected
LinuxLinux6.0.3 <= 6.0.*unaffected
LinuxLinux6.1 <= *unaffected

Weaknesses

References