CVE-2022-50400
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/09/2025
Last modified:
19/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
staging: greybus: audio_helper: remove unused and wrong debugfs usage<br />
<br />
In the greybus audio_helper code, the debugfs file for the dapm has the<br />
potential to be removed and memory will be leaked. There is also the<br />
very real potential for this code to remove ALL debugfs entries from the<br />
system, and it seems like this is what will really happen if this code<br />
ever runs. This all is very wrong as the greybus audio driver did not<br />
create this debugfs file, the sound core did and controls the lifespan<br />
of it.<br />
<br />
So remove all of the debugfs logic from the audio_helper code as there&#39;s<br />
no way it could be correct. If this really is needed, it can come back<br />
with a fixup for the incorrect usage of the debugfs_lookup() call which<br />
is what caused this to be noticed at all.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/4dab0d27a4211a27135a6899d6c737e6e0759a11
- https://git.kernel.org/stable/c/5699afbff1fa2972722e863906c0320d55dd4d58
- https://git.kernel.org/stable/c/d0febad83e29d85bb66e4f5cac0115b022403338
- https://git.kernel.org/stable/c/d517cdeb904ddc0cbebcc959d43596426cac40b0
- https://git.kernel.org/stable/c/d835fa49d9589a780ff0d001bb7e6323238a4afb