Memory Leak in Linux Kernel's DVB USB Adapter Initialization

CVE-2022-50626

What is CVE-2022-50626?

A memory leak has been identified in the initialization process of the DVB USB adapter in the Linux kernel. The defect arises when the system fails to correctly release memory allocated for 'adap->priv' during error handling. If an error occurs in key functions like 'dvb_usb_adapter_stream_init()', 'dvb_usb_adapter_dvb_init()', or 'dvb_usb_adapter_frontend_init()', the memory allocated for the current iteration's 'adapter->priv' does not get properly freed before exiting the function, resulting in unaccounted memory being leaked. The vulnerability has been addressed by adding necessary checks to ensure memory is appropriately freed, thereby resolving the leak and maintaining system stability.

References