Vulnerability in Linux

CVE-2022-50667

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() If the copy of the description string from userspace fails, then the page for the instance descriptor doesn't get freed before returning -EFAULT, which leads to a memleak.

EPSS: 0.002 (11.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 7a7a933edd6c3a6d5d64e08093f2d564104cefcd, 5.15, 0

References