In the Linux kernel, the following vulnerability has been resolved:

test_firmware: fix memory leak in test_firmware_init()

When misc_register() failed in test_firmware_init(), the memory pointed
by test_fw_config->name is not released. The memory leak information is
as follows:
unreferenced object 0xffff88810a34cb00 (size 32):
comm "insmod", pid 7952, jiffies 4294948236 (age 49.060s)
hex dump (first 32 bytes):
74 65 73 74 2d 66 69 72 6d 77 61 72 65 2e 62 69 test-firmware.bi
6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 n...............
backtrace:
[<ffffffff81b21fcb>] __kmalloc_node_track_caller+0x4b/0xc0
[<ffffffff81affb96>] kstrndup+0x46/0xc0
[<ffffffffa0403a49>] __test_firmware_config_init+0x29/0x380 [test_firmware]
[<ffffffffa040f068>] 0xffffffffa040f068
[<ffffffff81002c41>] do_one_initcall+0x141/0x780
[<ffffffff816a72c3>] do_init_module+0x1c3/0x630
[<ffffffff816adb9e>] load_module+0x623e/0x76a0
[<ffffffff816af471>] __do_sys_finit_module+0x181/0x240
[<ffffffff89978f99>] do_syscall_64+0x39/0xb0
[<ffffffff89a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00036.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
c92316bf8e94830a0225f2e904cbdbd173768419 affected < ed5cbafaf7ce8b86f19998c00eb020c8d49b017f
c92316bf8e94830a0225f2e904cbdbd173768419 affected < 04dd47a2e169f2d4489636afa07ff0469aab49ab
c92316bf8e94830a0225f2e904cbdbd173768419 affected < 628de998a3abfffb3f9677d2fb39a1d5dcb32fdb
c92316bf8e94830a0225f2e904cbdbd173768419 affected < 0b5a89e8bce1ea43687742b4de8e216189ff94ac
c92316bf8e94830a0225f2e904cbdbd173768419 affected < 357379d504c0c8b0834e206ad8c49e4b3c98ed4d
c92316bf8e94830a0225f2e904cbdbd173768419 affected < 8d8c1d6a430f0aadb80036e2b1bc0a05f9fad247
c92316bf8e94830a0225f2e904cbdbd173768419 affected < 6dd5fbd243f19f087dc79481acb7d69fb57fea2c
c92316bf8e94830a0225f2e904cbdbd173768419 affected < 7610615e8cdb3f6f5bbd9d8e7a5d8a63e3cabf2e
Linux Linux affected
Version Status Constraints
4.14 affected —
0 unaffected < 4.14
4.14.303 unaffected ≤ 4.14.*
4.19.270 unaffected ≤ 4.19.*
5.4.229 unaffected ≤ 5.4.*
5.10.163 unaffected ≤ 5.10.*
5.15.86 unaffected ≤ 5.15.*
6.0.16 unaffected ≤ 6.0.*
6.1.2 unaffected ≤ 6.1.*
6.2 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/04dd47a2e169f2d4489636afa07ff0469aab49ab cve-icon cve-icon
https://git.kernel.org/stable/c/0b5a89e8bce1ea43687742b4de8e216189ff94ac cve-icon cve-icon
https://git.kernel.org/stable/c/357379d504c0c8b0834e206ad8c49e4b3c98ed4d cve-icon cve-icon
https://git.kernel.org/stable/c/628de998a3abfffb3f9677d2fb39a1d5dcb32fdb cve-icon cve-icon
https://git.kernel.org/stable/c/6dd5fbd243f19f087dc79481acb7d69fb57fea2c cve-icon cve-icon
https://git.kernel.org/stable/c/7610615e8cdb3f6f5bbd9d8e7a5d8a63e3cabf2e cve-icon cve-icon
https://git.kernel.org/stable/c/8d8c1d6a430f0aadb80036e2b1bc0a05f9fad247 cve-icon cve-icon
https://git.kernel.org/stable/c/ed5cbafaf7ce8b86f19998c00eb020c8d49b017f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100707-CVE-2022-50529-d55b@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50529 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50529 cve-icon
History

Thu, 05 Feb 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Wed, 08 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 08 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Tue, 07 Oct 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: test_firmware: fix memory leak in test_firmware_init() When misc_register() failed in test_firmware_init(), the memory pointed by test_fw_config->name is not released. The memory leak information is as follows: unreferenced object 0xffff88810a34cb00 (size 32): comm "insmod", pid 7952, jiffies 4294948236 (age 49.060s) hex dump (first 32 bytes): 74 65 73 74 2d 66 69 72 6d 77 61 72 65 2e 62 69 test-firmware.bi 6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 n............... backtrace: [<ffffffff81b21fcb>] __kmalloc_node_track_caller+0x4b/0xc0 [<ffffffff81affb96>] kstrndup+0x46/0xc0 [<ffffffffa0403a49>] __test_firmware_config_init+0x29/0x380 [test_firmware] [<ffffffffa040f068>] 0xffffffffa040f068 [<ffffffff81002c41>] do_one_initcall+0x141/0x780 [<ffffffff816a72c3>] do_init_module+0x1c3/0x630 [<ffffffff816adb9e>] load_module+0x623e/0x76a0 [<ffffffff816af471>] __do_sys_finit_module+0x181/0x240 [<ffffffff89978f99>] do_syscall_64+0x39/0xb0 [<ffffffff89a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd
Title test_firmware: fix memory leak in test_firmware_init()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-07T15:19:20.581Z

Reserved: 2025-10-07T15:15:38.664Z

Link: CVE-2022-50529

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-10-07T16:15:36.883

Modified: 2026-02-05T15:17:47.350

Link: CVE-2022-50529

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-10-07T00:00:00Z

Links: CVE-2022-50529 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-08T13:36:28Z

Weaknesses