CVE-2022-50750 in Linux
Summary
by MITRE • 12/24/2025
In the Linux kernel, the following vulnerability has been resolved:
drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
In case mipi_dsi_attach() fails, call drm_panel_remove() to avoid memory leak.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 04/21/2026
The vulnerability identified as CVE-2022-50750 resides within the Linux kernel's display subsystem, specifically affecting the drm/panel/panel-sitronix-st7701 driver component. This issue represents a memory management flaw that occurs during the initialization process of display panels connected via the MIPI DSI (Display Serial Interface) protocol. The vulnerability manifests when the system attempts to attach a display panel but encounters a failure during the mipi_dsi_attach() operation, which is a critical step in establishing communication between the display controller and the physical panel hardware.
The technical flaw stems from improper error handling within the driver's attachment logic where the system fails to properly clean up resources when the MIPI DSI attachment process encounters an error condition. When mipi_dsi_attach() returns a failure status, the driver should execute proper resource deallocation procedures to prevent memory leaks and maintain system stability. However, in the affected implementation, the code path does not invoke drm_panel_remove() to handle the cleanup of panel resources, leaving allocated memory structures in an inconsistent state. This represents a classic resource management vulnerability that can lead to gradual memory exhaustion over time, particularly in systems where display panels are frequently reattached or where multiple panel attachment attempts occur.
The operational impact of this vulnerability extends beyond simple memory leaks to potentially compromise system stability and performance in embedded systems and mobile devices that rely heavily on proper display management. When multiple panel attachment failures occur in succession or when the system experiences intermittent display connection issues, the accumulated memory leaks can degrade overall system performance and may eventually lead to system crashes or unexpected behavior. The vulnerability affects devices running Linux kernels with the specific drm/panel/panel-sitronix-st7701 driver implementation, particularly those using Sitronix ST7701 display panels connected via MIPI DSI interface. This vulnerability is particularly concerning in automotive infotainment systems, mobile devices, and embedded industrial applications where display reliability is critical.
The fix implemented for CVE-2022-50750 addresses the root cause by ensuring proper resource cleanup when panel attachment fails. The solution involves adding a call to drm_panel_remove() whenever mipi_dsi_attach() returns an error, which properly deallocates the panel resources and prevents memory leaks. This remediation follows established best practices for error handling in kernel drivers and aligns with the principles of defensive programming. The fix specifically addresses the issue identified under CWE-404, which deals with improper resource management and memory leaks in software systems. This vulnerability demonstrates the importance of proper error handling and resource cleanup in kernel space drivers, where improper management can lead to system instability and potential denial of service conditions. The ATT&CK framework would categorize this vulnerability under the T1499.004 technique related to resource exhaustion, as the memory leak could eventually lead to system resource depletion. The fix ensures that all allocated resources are properly released regardless of the outcome of the attachment operation, maintaining system integrity and preventing the accumulation of leaked memory that could impact long-term system performance.