What’s Vulnerable › Vulnerabilities

CVE-2022-50667: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() If the copy of the description string from userspace fails, then the page for the instance descriptor doesn't get freed before returning -EFAULT, which leads to a memleak.

Affected products

• Linux kernel: 5.15 — fixed in 6.1

How to fix

Upgrade to a fixed version: Linux kernel 6.1. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/53066b144715332ce9370143c33c50d9a4d3e809
• https://git.kernel.org/stable/c/6ad40bbb2c25f17b899fcea114ebc0a46d8a938b
• https://git.kernel.org/stable/c/a40c7f61d12fbd1e785e59140b9efd57127c0c33
• https://git.kernel.org/stable/c/b47a37ad4a444d82f9caf153a79d090b79786ebb

Get alerted when CVE-2022-50667 or the next vulnerability affects your stack