CVE-2022-50667
drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() If the copy of the description string from userspace fails, then the page for the instance descriptor doesn't get freed before returning -EFAULT, which leads to a memleak.
Timeline
ID reserved
By Linux
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.24% · top 85% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 7a7a933edd6c3a6d5d64e08093f2d564104cefcd – < b47a37ad4a444d82f9caf153a79d090b79786ebb
- affected 7a7a933edd6c3a6d5d64e08093f2d564104cefcd – < 6ad40bbb2c25f17b899fcea114ebc0a46d8a938b
- affected 7a7a933edd6c3a6d5d64e08093f2d564104cefcd – < 53066b144715332ce9370143c33c50d9a4d3e809
- affected 7a7a933edd6c3a6d5d64e08093f2d564104cefcd – < a40c7f61d12fbd1e785e59140b9efd57127c0c33
- affected 5.15
- unaffected < 5.15
- unaffected 5.15.75 – ≤ 5.15.*
- unaffected 5.19.17 – ≤ 5.19.*
- unaffected 6.0.3 – ≤ 6.0.*
- unaffected 6.1 – ≤ *
References (4)
- https://git.kernel.org/stable/c/b47a37ad4a444d82f9caf153a79d090b79786ebb (opens in a new tab)
- https://git.kernel.org/stable/c/6ad40bbb2c25f17b899fcea114ebc0a46d8a938b (opens in a new tab)
- https://git.kernel.org/stable/c/53066b144715332ce9370143c33c50d9a4d3e809 (opens in a new tab)
- https://git.kernel.org/stable/c/a40c7f61d12fbd1e785e59140b9efd57127c0c33 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50667)Record last updated .