CVE-2022-50466

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50466
In the Linux kernel, the following vulnerability has been resolved: fs/binfmt_elf: Fix memory leak in load_elf_binary() There is a memory leak reported by kmemleak: unreferenced object 0xffff88817104ef80 (size 224): comm "xfs_admin", pid 47165, jiffies 4298708825 (age 1333.476s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 60 a8 b3 00 81 88 ff ff a8 10 5a 00 81 88 ff ff `.........Z..... backtrace: [<ffffffff819171e1>] __alloc_file+0x21/0x250 [<ffffffff81918061>] alloc_empty_file+0x41/0xf0 [<ffffffff81948cda>] path_openat+0xea/0x3d30 [<ffffffff8194ec89>] do_filp_open+0x1b9/0x290 [<ffffffff8192660e>] do_open_execat+0xce/0x5b0 [<ffffffff81926b17>] open_exec+0x27/0x50 [<ffffffff81a69250>] load_elf_binary+0x510/0x3ed0 [<ffffffff81927759>] bprm_execve+0x599/0x1240 [<ffffffff8192a997>] do_execveat_common.isra.0+0x4c7/0x680 [<ffffffff8192b078>] __x64_sys_execve+0x88/0xb0 [<ffffffff83bbf0a5>] do_syscall_64+0x35/0x80 If "interp_elf_ex" fails to allocate memory in load_elf_binary(), the program will take the "out_free_ph" error handing path, resulting in "interpreter" file resource is not released. Fix it by adding an error handing path "out_free_file", which will release the file resource when "interp_elf_ex" failed to allocate memory.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/265b6fb780f57d10449a40e94219b28fa52479cc Patch
https://git.kernel.org/stable/c/594d2a14f2168c09b13b114c3d457aa939403e52 Patch
https://git.kernel.org/stable/c/706215300411d48db6b51a5832b872632a84bbc1 Patch
https://git.kernel.org/stable/c/acd9b4914f1c5928c7ae8ebc623d6291eb1a573a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
History

16 Jan 2026, 19:15

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/265b6fb780f57d10449a40e94219b28fa52479cc - () https://git.kernel.org/stable/c/265b6fb780f57d10449a40e94219b28fa52479cc - Patch
References () https://git.kernel.org/stable/c/594d2a14f2168c09b13b114c3d457aa939403e52 - () https://git.kernel.org/stable/c/594d2a14f2168c09b13b114c3d457aa939403e52 - Patch
References () https://git.kernel.org/stable/c/706215300411d48db6b51a5832b872632a84bbc1 - () https://git.kernel.org/stable/c/706215300411d48db6b51a5832b872632a84bbc1 - Patch
References () https://git.kernel.org/stable/c/acd9b4914f1c5928c7ae8ebc623d6291eb1a573a - () https://git.kernel.org/stable/c/acd9b4914f1c5928c7ae8ebc623d6291eb1a573a - Patch
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

01 Oct 2025, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-01 12:15

Updated : 2026-01-16 19:15

NVD link : CVE-2022-50466

Mitre link : CVE-2022-50466

CVE.ORG link : CVE-2022-50466

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime