CVE-2022-50404

fbdev: fbcon: release buffer when fbcon_do_set_font() failed

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 23, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: fbcon: release buffer when fbcon_do_set_font() failed

syzbot is reporting memory leak at fbcon_do_set_font() [1], for commit a5a923038d70 ("fbdev: fbcon: Properly revert changes when vc_resize() failed") missed that the buffer might be newly allocated by fbcon_set_font().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	868749a7456dc48e93887a8474194e2ee6d6c21f to before 5a341810a22e51c3a7a108f7896b5fd58d44d127Affected ebd6f886aa2447fcfcdce5450c9e1028e1d681bb to before 88ec6d11052da527eb9268831e7a9bc5bbad02f6Affected a5a923038d70d2d4a86cb4e3f32625a5ee6e7e24 to before 06926607b9fddf7ce8017493899ce6eb7e79a123Affected a5a923038d70d2d4a86cb4e3f32625a5ee6e7e24 to before a609bfc1e644a8467cb31945ed1488374ebdc013Affected a5a923038d70d2d4a86cb4e3f32625a5ee6e7e24 to before 3c3bfb8586f848317ceba5d777e11204ba3e5758Affected f08ccb792d3eaf1dc62d8cbf6a30d6522329f660Affected 5.15.64 to before 5.15.86Affected 5.19.6 to before 5.20Affected
LinuxLinux	6.0Affected before 6.0Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

868749a7456dc48e93887a8474194e2ee6d6c21f to before 5a341810a22e51c3a7a108f7896b5fd58d44d127Affected
ebd6f886aa2447fcfcdce5450c9e1028e1d681bb to before 88ec6d11052da527eb9268831e7a9bc5bbad02f6Affected
a5a923038d70d2d4a86cb4e3f32625a5ee6e7e24 to before 06926607b9fddf7ce8017493899ce6eb7e79a123Affected
a5a923038d70d2d4a86cb4e3f32625a5ee6e7e24 to before a609bfc1e644a8467cb31945ed1488374ebdc013Affected
a5a923038d70d2d4a86cb4e3f32625a5ee6e7e24 to before 3c3bfb8586f848317ceba5d777e11204ba3e5758Affected
f08ccb792d3eaf1dc62d8cbf6a30d6522329f660Affected
5.15.64 to before 5.15.86Affected
5.19.6 to before 5.20Affected

LinuxLinux

6.0Affected
before 6.0Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.