CVE-2022-50400 staging: greybus: audio_helper: remove unused and wrong debugfs usage
A bug in the Linux kernel greybus audio driver could cause memory leaks and remove all system debugfs entries, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-50400?
CVE-2022-50400 is a medium-severity memory corruption vulnerability in Linux kernel, published on 18 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: audio_helper: remove unused and wrong debugfs usage
In the greybus audio_helper code, the debugfs file for the dapm has the potential to be removed and memory will be leaked. There is also the very real potential for this code to remove ALL debugfs entries from the system, and it seems like this is what will really happen if this code ever runs. This all is very wrong as the greybus audio driver did not create this debugfs file, the sound core did and controls the lifespan of it.
So remove all of the debugfs logic from the audio_helper code as there's no way it could be correct. If this really is needed, it can come back with a fixup for the incorrect usage of the debugfs_lookup() call which is what caused this to be noticed at all.
Weakness: CWE-401
Which versions are affected by CVE-2022-50400?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-50400?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-50400 being exploited?
There is no known exploitation of CVE-2022-50400 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-50400, GHSA-f9wf-xvm8-m6qp, UBUNTU-CVE-2022-50400.