Riskcovery

CVE-2022-50287

drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs

State
Published
Severity
Not scored
Published
Sep 15, 2025
Updated
May 11, 2026
Reserved
Sep 15, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs

When (size != 0 || ptrs->lvds_ entries != 3), the program tries to free() the ptrs. However, the ptrs is not created by calling kzmalloc(), but is obtained by pointer offset operation. This may lead to memory leaks or undefined behavior.

Fix this by replacing the arguments of kfree() with ptrs_block.

(cherry picked from commit 7674cd0b7d28b952151c3df26bbfa7e07eb2b4ec)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a87d0a84760726445dcc0f0177623f0d683f3559 to before 4758d04014cfe6cdb6e9b4738d1d6728487bbb3aAffected
  • a87d0a84760726445dcc0f0177623f0d683f3559 to before 7c852e8f93f04e57c1e3883caa72542469c6c4c4Affected
  • a87d0a84760726445dcc0f0177623f0d683f3559 to before 1382901f75a5a7dc8eac05059fd0c7816def4eaeAffected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.