---
id: CVE-2022-50537
title: 'firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()

  In rpi_firmware_probe(), if mbox_request_channel() fails, the 'fw' will
  not be freed through rp…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d537afa08e156a0a72562e625506825c2776fcfa <
    62ac943eb2a9d655e431b9bc98ff6d7bd51a0e49
  - >-
    Linux >= 60831f5ae6c713afceb6d29f40899ed112f36059 <
    d34742245e4366579f9a80f8cfe4a63248e838e0
  - >-
    Linux >= 1e7c57355a3bc617fc220234889e49fe722a6305 <
    b308fdedef095aac14569f810d46edf773ea7d1e
  - >-
    Linux >= 1e7c57355a3bc617fc220234889e49fe722a6305 <
    6757dd2193fe18c5c5fe3050e7f2ff9dcbd1ff34
  - >-
    Linux >= 1e7c57355a3bc617fc220234889e49fe722a6305 <
    71d2abab374f707ab8ac8dcef191fd2b3b67b8bd
  - >-
    Linux >= 1e7c57355a3bc617fc220234889e49fe722a6305 <
    7b51161696e803fd5f9ad55b20a64c2df313f95c
  - Linux >= 5.10.65 < 5.10.163
  - Linux 5.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:13:22.639496Z'
published: '2025-10-07'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:20:51.311Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50537'
references:
  - url: 'https://git.kernel.org/stable/c/62ac943eb2a9d655e431b9bc98ff6d7bd51a0e49'
  - url: 'https://git.kernel.org/stable/c/d34742245e4366579f9a80f8cfe4a63248e838e0'
  - url: 'https://git.kernel.org/stable/c/b308fdedef095aac14569f810d46edf773ea7d1e'
  - url: 'https://git.kernel.org/stable/c/6757dd2193fe18c5c5fe3050e7f2ff9dcbd1ff34'
  - url: 'https://git.kernel.org/stable/c/71d2abab374f707ab8ac8dcef191fd2b3b67b8bd'
  - url: 'https://git.kernel.org/stable/c/7b51161696e803fd5f9ad55b20a64c2df313f95c'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.0516
ingestedAt: '2026-11-05T22:38:31.747Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()

In rpi_firmware_probe(), if mbox_request_channel() fails, the 'fw' will
not be freed through rpi_firmware_delete(), fix this leak by calling
kfree() in the error path.

## Affected

- `Linux >= d537afa08e156a0a72562e625506825c2776fcfa < 62ac943eb2a9d655e431b9bc98ff6d7bd51a0e49`
- `Linux >= 60831f5ae6c713afceb6d29f40899ed112f36059 < d34742245e4366579f9a80f8cfe4a63248e838e0`
- `Linux >= 1e7c57355a3bc617fc220234889e49fe722a6305 < b308fdedef095aac14569f810d46edf773ea7d1e`
- `Linux >= 1e7c57355a3bc617fc220234889e49fe722a6305 < 6757dd2193fe18c5c5fe3050e7f2ff9dcbd1ff34`
- `Linux >= 1e7c57355a3bc617fc220234889e49fe722a6305 < 71d2abab374f707ab8ac8dcef191fd2b3b67b8bd`
- `Linux >= 1e7c57355a3bc617fc220234889e49fe722a6305 < 7b51161696e803fd5f9ad55b20a64c2df313f95c`
- `Linux >= 5.10.65 < 5.10.163`
- `Linux 5.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.