UnratedFix available
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it. Compile tested only.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.14.308, 4.19.276, 5.10.173, 5.15.99, 5.4.235, 6.1.16, 6.2.3
- CVEs
- CVE-2022-50321
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 21:33 UTC · Revision 1
Source evidence
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
core-osv · Original sourcePublished 15 Sept 2025, 14:48 UTC
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it. Compile tested only.
osv:CVE-2022-50321
Kernel
Fixed versions: 4.14.308, 4.19.276, 5.4.235, 5.10.173, 5.15.99, 6.1.16, 6.2.3
Complete source record
{
"id": "4857c8f4fe51b7964cdf60de56821cb7a486b1814eed4bb89518be20f9ecbaa8",
"url": "https://osv.dev/vulnerability/CVE-2022-50321",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it. Compile tested only.",
"evidence": "osv:CVE-2022-50321",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.14.308",
"evidence": "/affected/1/ranges"
},
{
"value": "4.19.276",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.235",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.173",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.99",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.16",
"evidence": "/affected/1/ranges"
},
{
"value": "6.2.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2022-50321",
"aliases": [
"CVE-2022-50321"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "270a6c1f65fe68a28a5d39cd405592c550b496c7"
},
{
"fixed": "4c55fdebc1c358de96bfab52ed309d58a3ba66ef"
},
{
"fixed": "e5d01e85cf46628647cd696cb72ba4659b18967f"
},
{
"fixed": "d869a189505224601e310c7769cb90b0e2f60b31"
},
{
"fixed": "e08e6812efb6a8c676e733de0518594d1517e0d9"
},
{
"fixed": "e8ef89e5b89ee041a94eecfb6c31fcc237f9168c"
},
{
"fixed": "7f159116d620615779adbf88a5d94713702216d8"
},
{
"fixed": "3a4d18318f473e97d628f410215b3fac32d07aed"
},
{
"fixed": "212fde3fe76e962598ce1d47b97cc78afdfc71b3"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50321.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.14.308"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.276"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.235"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.173"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.99"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.16"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.2.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50321.json"
}
}
],
"modified": "2026-10-28T02:30:23.952820272Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/212fde3fe76e962598ce1d47b97cc78afdfc71b3",
"https://git.kernel.org/stable/c/3a4d18318f473e97d628f410215b3fac32d07aed",
"https://git.kernel.org/stable/c/4c55fdebc1c358de96bfab52ed309d58a3ba66ef",
"https://git.kernel.org/stable/c/7f159116d620615779adbf88a5d94713702216d8",
"https://git.kernel.org/stable/c/d869a189505224601e310c7769cb90b0e2f60b31",
"https://git.kernel.org/stable/c/e08e6812efb6a8c676e733de0518594d1517e0d9",
"https://git.kernel.org/stable/c/e5d01e85cf46628647cd696cb72ba4659b18967f",
"https://git.kernel.org/stable/c/e8ef89e5b89ee041a94eecfb6c31fcc237f9168c",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50321.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50321",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50321.json"
}
},
"related_cves": [
{
"value": "CVE-2022-50321",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 490308,
"published_at": "2025-09-15T14:48:54.808+00:00"
}