media: airspy: fix memory leak in airspy probe

{
  "id": "ffe852264e8c1201e782ab57f6aca039f28cbaadba2e4ed4a57b257b03055dc4",
  "url": "https://osv.dev/vulnerability/CVE-2022-50326",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "media: airspy: fix memory leak in airspy probe",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: media: airspy: fix memory leak in airspy probe The commit ca9dc8d06ab6 (\"media: airspy: respect the DMA coherency rules\") moves variable buf from stack to heap, however, it only frees buf in the error handling code, missing deallocation in the success path. Fix this by freeing buf in the success path since this variable does not have any references in other code.",
    "evidence": "osv:CVE-2022-50326",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.0.3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2022-50326",
      "aliases": [
        "CVE-2022-50326"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "ca9dc8d06ab64543a6a31adac5003349c5671218"
                },
                {
                  "fixed": "f4285dd02b6b2ca3435b65fb62c053dd9408fd71"
                },
                {
                  "fixed": "23bc5eb55f8c9607965c20d9ddcc13cb1ae59568"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50326.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.0.0"
                },
                {
                  "fixed": "6.0.3"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50326.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:46.384271494Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/23bc5eb55f8c9607965c20d9ddcc13cb1ae59568",
        "https://git.kernel.org/stable/c/f4285dd02b6b2ca3435b65fb62c053dd9408fd71",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50326.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50326",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50326.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2022-50326",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 514465,
  "published_at": "2025-09-15T14:49:24.523+00:00"
}