CVE-2022-50521

platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()

State: Published
Severity: Not scored
Published: Oct 7, 2025
Updated: May 11, 2026
Reserved: Oct 7, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()

The ACPI buffer memory (out.pointer) returned by wmi_evaluate_method() is not freed after the call, so it leads to memory leak.

The method results in ACPI buffer is not used, so just pass NULL to wmi_evaluate_method() which fixes the memory leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	99b38b4acc0d7dbbab443273577cff60080fcfad to before 50ac517d6f5348b276f1f663799cf85dce521518Affected 99b38b4acc0d7dbbab443273577cff60080fcfad to before 5b0f81b0808235967868e01336c976e840217108Affected 99b38b4acc0d7dbbab443273577cff60080fcfad to before 14bb4bde3b7b2584734b13747b345caeeb41bea3Affected 99b38b4acc0d7dbbab443273577cff60080fcfad to before 17cd8c46cbec4e6ad593fb9159928b8e7608c11aAffected 99b38b4acc0d7dbbab443273577cff60080fcfad to before 3cf81501356c9e898ad94b2369ffc805f83f7d7bAffected 99b38b4acc0d7dbbab443273577cff60080fcfad to before 379e7794c5e7485193d25d73614fbbd1e1387f6fAffected 99b38b4acc0d7dbbab443273577cff60080fcfad to before 87426ce3bd57ad414b6e2436434ef8128986a9a5Affected 99b38b4acc0d7dbbab443273577cff60080fcfad to before 727cc0147f5066e359aca65cc6cc5e6d64cc15d8Affected
LinuxLinux	3.0Affected before 3.0Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

99b38b4acc0d7dbbab443273577cff60080fcfad to before 50ac517d6f5348b276f1f663799cf85dce521518Affected
99b38b4acc0d7dbbab443273577cff60080fcfad to before 5b0f81b0808235967868e01336c976e840217108Affected
99b38b4acc0d7dbbab443273577cff60080fcfad to before 14bb4bde3b7b2584734b13747b345caeeb41bea3Affected
99b38b4acc0d7dbbab443273577cff60080fcfad to before 17cd8c46cbec4e6ad593fb9159928b8e7608c11aAffected
99b38b4acc0d7dbbab443273577cff60080fcfad to before 3cf81501356c9e898ad94b2369ffc805f83f7d7bAffected
99b38b4acc0d7dbbab443273577cff60080fcfad to before 379e7794c5e7485193d25d73614fbbd1e1387f6fAffected
99b38b4acc0d7dbbab443273577cff60080fcfad to before 87426ce3bd57ad414b6e2436434ef8128986a9a5Affected
99b38b4acc0d7dbbab443273577cff60080fcfad to before 727cc0147f5066e359aca65cc6cc5e6d64cc15d8Affected

LinuxLinux

3.0Affected
before 3.0Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.