SB2025061935 - Memory leak in Linux kernel video fbdev driver
Published: June 19, 2025 Updated: June 21, 2025
Security Bulletin ID
SB2025061935
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2022-50109)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the clcdfb_of_init_display() function in drivers/video/fbdev/amba-clcd.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/2688df86c02da6bdc9866b62d974e169a2678883
- https://git.kernel.org/stable/c/26c2b7d9fac42eb8317f3ceefa4c1a9a9170ca69
- https://git.kernel.org/stable/c/29f06f1905c312671a09ee85ca92ac04a1d9f305
- https://git.kernel.org/stable/c/49a4c1a87ef884e43cdda58b142a2a30f2f09efc
- https://git.kernel.org/stable/c/a51519ebd0fdad3546463018b8f6bc3b0f4d3032
- https://git.kernel.org/stable/c/a88ab277cca99aeb9a3b2b7db358f1a6dd528b0c
- https://git.kernel.org/stable/c/a97ff8a949dbf41be89f436b2b1a2b3d794493df
- https://git.kernel.org/stable/c/da276dc288bf838ea0fd778b5441ec0f601c69f7
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.137