What’s Vulnerable › Vulnerabilities

CVE-2022-50557: pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-22 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions() The thunderbay_add_functions() will free memory of thunderbay_funcs when everything is ok, but thunderbay_funcs will not be freed when thunderbay_add_functions() fails, then there will be a memory leak, so we need to add kfree() when thunderbay_add_functions() fails to fix it. In addition, doing some cleaner works, moving kfree(funcs) from thunderbay_add_functions() to thunderbay_build_functions().

Affected products

• Linux kernel: 5.17 — fixed in 6.2

How to fix

Upgrade to a fixed version: Linux kernel 6.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3650943bab29d03ef147290451237713ed1942cd
• https://git.kernel.org/stable/c/83e1bcaf8cef26edaaf2a6098ef760f563683483
• https://git.kernel.org/stable/c/aae4846e8e49044cb51d0276bec2a3fc2d5cd8da

Get alerted when CVE-2022-50557 or the next vulnerability affects your stack