PT-2025-40154 · Linux+3 · Linux Kernel+3

Published 2025-10-01 · Updated 2026-03-14 · CVE-2022-50469

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the rtw init drv sw() function within the rtl8723bs driver. Specifically, error paths within this function do not properly release previously allocated resources, leading to memory leaks. The issue occurs because several initialization functions populate a padapter structure, and only the first error path correctly releases resources. The remaining error paths fail to do so. The fix separates success and error handling to address this. No runtime testing was performed due to the lack of a suitable device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2022-50469

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Debian

Linux Kernel

Suse

Rtl8723Bs

References · 859

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50469.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50469 · Vendor Advisory
• https://git.kernel.org/stable/c/6b2052b365f8035ab7f09ac24b5b499002b298cb · Patch
• https://git.kernel.org/stable/c/d95d1526d9f06978c1a7186810a5490d72c62742 · Patch
• https://ubuntu.com/security/CVE-2022-50469 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50469 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50469 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50469 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b4573a2bad3c3e2643ef3939079eb7035a30e6ee · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50469 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50469 · Vendor Advisory