SB2025061907 - Memory leak in Linux kernel mediatek mt6797
Published: June 19, 2025 Updated: June 21, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2022-50124)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the mt6797_mt6351_dev_probe() function in sound/soc/mediatek/mt6797/mt6797-mt6351.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1042353bb67cd1c9109d7481ea182c7794336458
- https://git.kernel.org/stable/c/38dc6faef05f33b4c889be8b7d65878e465c1c4b
- https://git.kernel.org/stable/c/67a28402a9e8c229c7588f214d81d52903ea06ea
- https://git.kernel.org/stable/c/7472eb8d7dd12b6b9b1a4f4527719cc9c7f5965f
- https://git.kernel.org/stable/c/7dee72b1bcecb26bfff8d6360f2169f8656dbaf6
- https://git.kernel.org/stable/c/a0381a9f3e595988e83bac4c4dd1e45ed2b3c744
- https://git.kernel.org/stable/c/b488ceb2336905f071f80627bc8a7d657274e5de
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.211