Linux Kernel Vulnerability in Airspy Media Handling

CVE-2022-50326

What is CVE-2022-50326?

A vulnerability exists in the Linux kernel related to the Airspy media driver, where a memory leak occurs during the handling of a buffer. The code modification aimed to ensure compliance with DMA coherency rules inadvertently led to the allocation of a variable in the heap without proper deallocation in the success path. This oversight can cause memory to be wasted over repeated successful operations, potentially leading to performance degradation and resource exhaustion.

References