
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-50400 is a vulnerability in the Linux kernel's greybus audio_helper code. The vulnerability was published to the CVE List and included in the NVD dataset on September 18, 2025. The issue affects the debugfs file handling in the greybus audio_helper module (NVD).
The vulnerability exists in the greybus audio_helper code where the debugfs file for the dapm has the potential to be removed incorrectly. The issue stems from improper handling of debugfs entries, which could lead to memory leaks. More critically, there is a potential for the code to remove ALL debugfs entries from the system. The root cause is that the greybus audio driver incorrectly attempts to manage a debugfs file that was created and should be managed by the sound core (NVD).
The vulnerability can result in two main impacts: 1) Memory leaks due to improper removal of debugfs files, and 2) Potential system-wide removal of ALL debugfs entries, which could significantly impact system functionality and debugging capabilities (NVD).
The vulnerability has been resolved by removing all debugfs logic from the audio_helper code, as it was determined that the greybus audio driver should not be managing these debugfs entries. If this functionality is needed in the future, it can be reimplemented with proper fixes for the incorrect usage of the debugfs_lookup() call (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."