In the Linux kernel, the following vulnerability has been resolved: platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() The ACPI buffer memory (out.pointer) returned by wmi_evaluate_method() is not freed after the call, so it leads to memory leak. The method results in ACPI buffer is not used, so just pass NULL to wmi_evaluate_method() which fixes the memory leak.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/14bb4bde3b7b2584734b13747b345caeeb41bea3 cve-icon cve-icon
https://git.kernel.org/stable/c/17cd8c46cbec4e6ad593fb9159928b8e7608c11a cve-icon cve-icon
https://git.kernel.org/stable/c/379e7794c5e7485193d25d73614fbbd1e1387f6f cve-icon cve-icon
https://git.kernel.org/stable/c/3cf81501356c9e898ad94b2369ffc805f83f7d7b cve-icon cve-icon
https://git.kernel.org/stable/c/50ac517d6f5348b276f1f663799cf85dce521518 cve-icon cve-icon
https://git.kernel.org/stable/c/5b0f81b0808235967868e01336c976e840217108 cve-icon cve-icon
https://git.kernel.org/stable/c/727cc0147f5066e359aca65cc6cc5e6d64cc15d8 cve-icon cve-icon
https://git.kernel.org/stable/c/87426ce3bd57ad414b6e2436434ef8128986a9a5 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100704-CVE-2022-50521-fd26@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50521 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50521 cve-icon
History

Wed, 08 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 08 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 07 Oct 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() The ACPI buffer memory (out.pointer) returned by wmi_evaluate_method() is not freed after the call, so it leads to memory leak. The method results in ACPI buffer is not used, so just pass NULL to wmi_evaluate_method() which fixes the memory leak.
Title platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-10-07T15:19:15.213Z

Updated: 2025-10-07T15:19:15.213Z

Reserved: 2025-10-07T15:15:38.663Z

Link: CVE-2022-50521

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-07T16:15:35.883

Modified: 2025-10-08T19:38:32.610

Link: CVE-2022-50521

cve-icon Redhat

Severity : Low

Publid Date: 2025-10-07T00:00:00Z

Links: CVE-2022-50521 - Bugzilla