SB2025061962 - Memory leak in Linux kernel soc qcom driver
Published: June 19, 2025 Updated: June 21, 2025
Security Bulletin ID
SB2025061962
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2022-50196)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the of_get_ocmem() function in drivers/soc/qcom/ocmem.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/07aea6819d569d1e172227486655e4fb5bd4cdb9
- https://git.kernel.org/stable/c/84a928b44cb303d5756e3bff2734921de8dce4f6
- https://git.kernel.org/stable/c/92a563fcf14b3093226fb36f12e9b5cf630c5a5d
- https://git.kernel.org/stable/c/a1e4243c0dddeafb4ace6d9906d3f5129b81a9fe
- https://git.kernel.org/stable/c/ed40a48d0a9166edb22e2b8efafea822e93dd79a
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2