Not yet scoredPublished Dec 30, 2025

CVE-2022-50882media: uvcvideo: Fix memory leak in uvc_gpio_parse

Updated under an hour ago (Oct 26, 2026, 2:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it. Addresses-Coverity-ID: 1474639 ("Resource leak")

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	2886477ff98740cc3333cf785e4de0b1ff3d7a28 builds before 6c5da92103bddd1f0c36cb69446ff7cae3043986; from 2886477ff98740cc3333cf785e4de0b1ff3d7a28 before deb8f32ae4b10a48c433f2da1b1159521ac24674; 2886477ff98740cc3333cf785e4de0b1ff3d7a28 builds before 4a7ae8d982a89b3b43b36ec7d62a2e3d06ffa16e; from 2886477ff98740cc3333cf785e4de0b1ff3d7a28 before f0f078457f18f10696888f8d0e6aba9deb9cde92	CNA record

References

References

https://git.kernel.org/stable/c/6c5da92103bddd1f0c36cb69446ff7cae3043986
https://git.kernel.org/stable/c/deb8f32ae4b10a48c433f2da1b1159521ac24674
https://git.kernel.org/stable/c/4a7ae8d982a89b3b43b36ec7d62a2e3d06ffa16e
https://git.kernel.org/stable/c/f0f078457f18f10696888f8d0e6aba9deb9cde92

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.