CVE-2022-50400

Source
https://cve.org/CVERecord?id=CVE-2022-50400
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50400.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-50400
Downstream
Published
2025-09-18T13:58:41.397Z
Modified
2026-07-15T01:49:11.035429306Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
staging: greybus: audio_helper: remove unused and wrong debugfs usage
Details

In the Linux kernel, the following vulnerability has been resolved:

staging: greybus: audio_helper: remove unused and wrong debugfs usage

In the greybus audio_helper code, the debugfs file for the dapm has the potential to be removed and memory will be leaked. There is also the very real potential for this code to remove ALL debugfs entries from the system, and it seems like this is what will really happen if this code ever runs. This all is very wrong as the greybus audio driver did not create this debugfs file, the sound core did and controls the lifespan of it.

So remove all of the debugfs logic from the audiohelper code as there's no way it could be correct. If this really is needed, it can come back with a fixup for the incorrect usage of the debugfslookup() call which is what caused this to be noticed at all.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50400.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
510e340efe0cbd379cf1ff3490d088c3299749b1
Fixed
d0febad83e29d85bb66e4f5cac0115b022403338
Fixed
4dab0d27a4211a27135a6899d6c737e6e0759a11
Fixed
5699afbff1fa2972722e863906c0320d55dd4d58
Fixed
d835fa49d9589a780ff0d001bb7e6323238a4afb
Fixed
d517cdeb904ddc0cbebcc959d43596426cac40b0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50400.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.9.0
Fixed
5.10.150
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.75
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.19.17
Type
ECOSYSTEM
Events
Introduced
5.20.0
Fixed
6.0.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50400.json"