---
id: CVE-2022-50321
title: 'wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()

  The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb
  in case of pskb_expand_he…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 <
    4c55fdebc1c358de96bfab52ed309d58a3ba66ef
  - >-
    Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 <
    e5d01e85cf46628647cd696cb72ba4659b18967f
  - >-
    Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 <
    d869a189505224601e310c7769cb90b0e2f60b31
  - >-
    Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 <
    e08e6812efb6a8c676e733de0518594d1517e0d9
  - >-
    Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 <
    e8ef89e5b89ee041a94eecfb6c31fcc237f9168c
  - >-
    Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 <
    7f159116d620615779adbf88a5d94713702216d8
  - >-
    Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 <
    3a4d18318f473e97d628f410215b3fac32d07aed
  - >-
    Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 <
    212fde3fe76e962598ce1d47b97cc78afdfc71b3
  - Linux 4.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:09:49.353484Z'
published: '2025-09-15'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:10:34.994Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50321'
references:
  - url: 'https://git.kernel.org/stable/c/4c55fdebc1c358de96bfab52ed309d58a3ba66ef'
  - url: 'https://git.kernel.org/stable/c/e5d01e85cf46628647cd696cb72ba4659b18967f'
  - url: 'https://git.kernel.org/stable/c/d869a189505224601e310c7769cb90b0e2f60b31'
  - url: 'https://git.kernel.org/stable/c/e08e6812efb6a8c676e733de0518594d1517e0d9'
  - url: 'https://git.kernel.org/stable/c/e8ef89e5b89ee041a94eecfb6c31fcc237f9168c'
  - url: 'https://git.kernel.org/stable/c/7f159116d620615779adbf88a5d94713702216d8'
  - url: 'https://git.kernel.org/stable/c/3a4d18318f473e97d628f410215b3fac32d07aed'
  - url: 'https://git.kernel.org/stable/c/212fde3fe76e962598ce1d47b97cc78afdfc71b3'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.05159
ingestedAt: '2026-11-05T22:38:31.726Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()

The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb
in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it.
Compile tested only.

## Affected

- `Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < 4c55fdebc1c358de96bfab52ed309d58a3ba66ef`
- `Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < e5d01e85cf46628647cd696cb72ba4659b18967f`
- `Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < d869a189505224601e310c7769cb90b0e2f60b31`
- `Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < e08e6812efb6a8c676e733de0518594d1517e0d9`
- `Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < e8ef89e5b89ee041a94eecfb6c31fcc237f9168c`
- `Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < 7f159116d620615779adbf88a5d94713702216d8`
- `Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < 3a4d18318f473e97d628f410215b3fac32d07aed`
- `Linux >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < 212fde3fe76e962598ce1d47b97cc78afdfc71b3`
- `Linux 4.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.