What’s Vulnerable › Vulnerabilities

CVE-2022-50294: wifi: libertas: fix memory leak in lbs_init_adapter()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-15 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in lbs_init_adapter() When kfifo_alloc() failed in lbs_init_adapter(), cmd buffer is not released. Add free memory to processing error path.

Affected products

• Linux kernel: from 2.6.26 before 4.14.308; from 4.15 before 4.19.276; from 4.20 before 5.4.235; from 5.5 before 5.10.173; from 5.11 before 5.15.99; from 5.16 before 6.1.16 — fixed in 4.14.308, 4.19.276, 5.10.173, 5.15.99, 5.4.235, 6.1.16

How to fix

Upgrade to a fixed version: Linux kernel 4.14.308, 4.19.276, 5.10.173, 5.15.99. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/037f84c0bfae5c436c651d0e804264e2648010ec
• https://git.kernel.org/stable/c/16a03958618fb91bb1bc7077cf3211055162cc2f
• https://git.kernel.org/stable/c/23b34e08de5c2380414c9d3c33e8235094bcccae
• https://git.kernel.org/stable/c/4c102ad59bfa66c0f6662af64fa3b9007b02c20f
• https://git.kernel.org/stable/c/653d13a73e498d0bb6aeaf689aaa960defa7878b
• https://git.kernel.org/stable/c/98e0ff6980c89239d9e5d3da90d791c2383dc23a
• https://git.kernel.org/stable/c/9c8f50c7433bdfba1588831c413136ecc3f29f99
• https://git.kernel.org/stable/c/d46c33f667b05c22bc5c5b69aa730349c4b6fe31

Get alerted when CVE-2022-50294 or the next vulnerability affects your stack