CVE-2022-50513

staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()

State
Published
Severity
Not scored
Published
Oct 7, 2025
Updated
May 11, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()

In rtw_init_cmd_priv(), if `pcmdpriv->rsp_allocated_buf` is allocated in failure, then `pcmdpriv->cmd_allocated_buf` will be not properly released. Besides, considering there are only two error paths and the first one can directly return, so we do not need implicitly jump to the `exit` tag to execute the error handler.

So this patch added `kfree(pcmdpriv->cmd_allocated_buf);` on the error path to release the resource and simplified the return logic of rtw_init_cmd_priv(). As there is no proper device to test with, no runtime testing was performed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before e5d8f05edb36fc4ab15beec62cb6ab62f5a60fe2Affected
  • 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before e6cc39db24a63f68314473621020ed8cad7be423Affected
  • 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 39bef9c6a91bbb790d04c1347cfeae584541fb6aAffected
  • 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before a5be64ff6d21f7805a91e6d81f53fc19cd9f0faeAffected
  • 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 8db6ca84eee0ac258706f3fca54f7c021cb159efAffected
  • 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 708056fba733a73d926772ea4ce9a42d240345daAffected
LinuxLinux
  • 4.12Affected
  • before 4.12Not affected
  • 5.4.220 through 5.4.*Not affected
  • 5.10.150 through 5.10.*Not affected
  • 5.15.75 through 5.15.*Not affected
  • 5.19.17 through 5.19.*Not affected
  • 6.0.3 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.