CVE-2022-50424: 
Linux Kernel vulnerability analysis and mitigation

A resource leak vulnerability was identified in the Linux kernel's WiFi driver component, specifically in the mt7921checkoffload_capability() function of the mt76/mt7921 module. The vulnerability (CVE-2022-50424) was discovered and disclosed on October 1, 2025, affecting the firmware handling in the WiFi driver (NVD).

The vulnerability occurs when the variable 'fw' goes out of scope, causing storage leaks in the mt7921checkoffload_capability() function. Specifically, the function leaks firmware memory when early returning on invalid firmware conditions. This issue was identified through Coverity analysis with ID 1527806 (Red Hat).

The impact of this vulnerability is considered Minimal (Low) as it may cause memory leaks if repeatedly triggered. While it can lead to resource exhaustion over time, it is not exploitable for privilege escalation (Red Hat).

The vulnerability has been resolved in the Linux kernel through patches that fix the resource leak issue. The fix addresses the Coverity-reported problem by properly managing the firmware resource allocation and deallocation (Ubuntu).