CVE-2022-50660: wifi: ipw2200: fix memory leak in ipw_wdev_init()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2200: fix memory leak in ipw_wdev_init() In the error path of ipw_wdev_init(), exception value is returned, and the memory applied for in the function is not released. Also the memory is not released in ipw_pci_probe(). As a result, memory leakage occurs. So memory release needs to be added to the error path of ipw_wdev_init().

Affected products

Linux kernel: 2.6.33 — fixed in 6.3

How to fix

Upgrade to a fixed version: Linux kernel 6.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/112c1af02b8f535baf42ef9d807aea963705ef15
https://git.kernel.org/stable/c/1f590fb3d14e5db3a9e06ee141b1685c429278ce
https://git.kernel.org/stable/c/62ec7e8bf42f1542f966dda687c654aae81718c8
https://git.kernel.org/stable/c/75d20ba9506eb90d92e660e04dd887ff1495fcc3
https://git.kernel.org/stable/c/8a2eb9d9d0c1535bc8e22840193bff4cdcac878b
https://git.kernel.org/stable/c/9424ea9d557ef41d86eb40b6349ae991c3dcff89
https://git.kernel.org/stable/c/9fe21dc626117fb44a8eb393713a86a620128ce3
https://git.kernel.org/stable/c/fb3517b92a45c8004ac26250ae041a24eb23fef1

Get alerted when CVE-2022-50660 or the next vulnerability affects your stack