CVE-2022-50660 wifi: ipw2200: fix memory leak in ipw_wdev_init()
A memory leak in the ipw2200 Wi-Fi driver allows local attackers to cause a denial of service by exhausting kernel memory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-50660?
CVE-2022-50660 is a memory corruption vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: ipw2200: fix memory leak in ipw_wdev_init()
In the error path of ipw_wdev_init(), exception value is returned, and the memory applied for in the function is not released. Also the memory is not released in ipw_pci_probe(). As a result, memory leakage occurs. So memory release needs to be added to the error path of ipw_wdev_init().
Which versions are affected by CVE-2022-50660?
How do I fix CVE-2022-50660?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-50660 being exploited?
There is no known exploitation of CVE-2022-50660 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2022-50660, GHSA-jjcv-w6qg-r3fw, UBUNTU-CVE-2022-50660.