CVE-2022-50088

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50088
In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: fix potential memory leak in damon_reclaim_init() damon_reclaim_init() allocates a memory chunk for ctx with damon_new_ctx(). When damon_select_ops() fails, ctx is not released, which will lead to a memory leak. We should release the ctx with damon_destroy_ctx() when damon_select_ops() fails to fix the memory leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/188043c7f4f2bd662f2a55957d684fffa543e600 Patch
https://git.kernel.org/stable/c/700aa4e11a3c4d2a44d06758db431a013d9e1b61 Patch
https://git.kernel.org/stable/c/9d3e9e1e0856f4c905bbb870f16f42ae72477071 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 02:19

Type Values Removed Values Added
CWE CWE-401
References () https://git.kernel.org/stable/c/188043c7f4f2bd662f2a55957d684fffa543e600 - () https://git.kernel.org/stable/c/188043c7f4f2bd662f2a55957d684fffa543e600 - Patch
References () https://git.kernel.org/stable/c/700aa4e11a3c4d2a44d06758db431a013d9e1b61 - () https://git.kernel.org/stable/c/700aa4e11a3c4d2a44d06758db431a013d9e1b61 - Patch
References () https://git.kernel.org/stable/c/9d3e9e1e0856f4c905bbb870f16f42ae72477071 - () https://git.kernel.org/stable/c/9d3e9e1e0856f4c905bbb870f16f42ae72477071 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/damon/reclaim: se corrige una posible fuga de memoria en damon_reclaim_init(). damon_reclaim_init() asigna un fragmento de memoria para ctx con damon_new_ctx(). Cuando damon_select_ops() falla, ctx no se libera, lo que provoca una fuga de memoria. Deberíamos liberar ctx con damon_destroy_ctx() cuando damon_select_ops() no solucione la fuga de memoria.
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 02:19

NVD link : CVE-2022-50088

Mitre link : CVE-2022-50088

CVE.ORG link : CVE-2022-50088

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime