PT-2025-54118 · Linux+1 · Linux Kernel+1

Published 2025-12-30 · Updated 2026-02-24 · CVE-2022-50882

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak existed in the uvc gpio parse function within the uvcvideo module. The unit buffer was allocated before checking the Interrupt Request (IRQ) for privacy GPIO. If an error occurred during the IRQ check, the unit buffer was not freed, resulting in a memory leak. The issue was addressed by allocating the unit buffer after the IRQ check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50882

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

Uvcvideo

References · 973

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50882.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50882 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50882 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50882 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50882 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50882 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50882 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50882 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-53862 · Note
• https://bugzilla.suse.com/1255970 · Note
• https://suse.com/security/cve/CVE-2023-54025 · Note