CVE-2022-50416: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50416 is a memory leak vulnerability discovered in the Linux kernel's irqchip/wpcm450 component. The issue occurs in the wpcm450_aic_of_init() function where if of_iomap() fails, the 'aic' memory is not properly freed before returning, resulting in a memory leak (NVD). The vulnerability was publicly disclosed on September 18, 2025.

The vulnerability exists in the initialization function wpcm450_aic_of_init() of the WPCM450 Advanced Interrupt Controller (AIC) driver. When the of_iomap() function call fails, the code path fails to free the previously allocated 'aic' memory structure, leading to a memory leak condition (Ubuntu).

The memory leak can result in gradual system memory depletion over time, potentially affecting system performance and stability in systems using the WPCM450 interrupt controller (NVD).

Multiple Linux distributions have released patches to address this vulnerability. Ubuntu has fixed this in various kernel versions including linux-kvm (5.15.0-1030.35), linux-azure (5.15.0-1035.42), and linux-gcp (5.15.0-1031.38) (Ubuntu). Users are advised to update their systems to the patched versions.