CVE-2022-50134
published 2025-06-18CVE-2022-50134: In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
11.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
setup_base_ctxt() allocates a memory chunk for uctxt->groups with
hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups
is not released, which will lead to a memory leak.
We should release the uctxt->groups with hfi1_free_ctxt_rcv_groups()
when init_user_ctxt() fails.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e87473bc1b6c2cb08f1b760cfc8cd012822241a6 < fc4de8009fd6c2ca51986c6757efa964040e7d02 | fc4de8009fd6c2ca51986c6757efa964040e7d02 |
| linux | linux | >= e87473bc1b6c2cb08f1b760cfc8cd012822241a6 < 90ef48a718f88935d4af53d7dadd1ceafe103ce6 | 90ef48a718f88935d4af53d7dadd1ceafe103ce6 |
| linux | linux | >= e87473bc1b6c2cb08f1b760cfc8cd012822241a6 < 2f90813f1c21c3d780585390af961bd17c8515ae | 2f90813f1c21c3d780585390af961bd17c8515ae |
| linux | linux | >= e87473bc1b6c2cb08f1b760cfc8cd012822241a6 < a85c7dd1edadcdeca24e603a6618153a3bcc81ca | a85c7dd1edadcdeca24e603a6618153a3bcc81ca |
| linux | linux | >= e87473bc1b6c2cb08f1b760cfc8cd012822241a6 < e25b828553aecb3185a8d8d0c4f9b4e133fb5db6 | e25b828553aecb3185a8d8d0c4f9b4e133fb5db6 |
| linux | linux | >= e87473bc1b6c2cb08f1b760cfc8cd012822241a6 < 1750be1e9f18787cf717c24dbc5fa029fc372a22 | 1750be1e9f18787cf717c24dbc5fa029fc372a22 |
| linux | linux | >= e87473bc1b6c2cb08f1b760cfc8cd012822241a6 < a9055dfe437efae77e28e57205437c878a03ccb7 | a9055dfe437efae77e28e57205437c878a03ccb7 |
| linux | linux | >= e87473bc1b6c2cb08f1b760cfc8cd012822241a6 < aa2a1df3a2c85f855af7d54466ac10bd48645d63 | aa2a1df3a2c85f855af7d54466ac10bd48645d63 |
| linux | linux_kernel | >= 0 < 5.10.140-1 | 5.10.140-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 4.14 < 4.14.291 | 4.14.291 |
| linux | linux_kernel | >= 4.15 < 4.19.256 | 4.19.256 |
| linux | linux_kernel | >= 4.20 < 5.4.211 | 5.4.211 |
| linux | linux_kernel | >= 5.11 < 5.15.61 | 5.15.61 |
| linux | linux_kernel | >= 5.16 < 5.18.18 | 5.18.18 |
| linux | linux_kernel | >= 5.19 < 5.19.2 | 5.19.2 |
| linux | linux_kernel | >= 5.5 < 5.10.137 | 5.10.137 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50134 [MEDIUM] kernel: RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
kernel: RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
setup_base_ctxt() allocates a memory chunk for uctxt->groups with
hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups
is not released, which will lead to a memory leak.
We should release the uctxt->groups with hfi1_free_ctxt_rcv_groups()
when init_user_ctxt() fails.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel (Red Hat Enterprise Linux 8) - Fix deferred
Package:
Debian
CVE-2022-50134: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: ...
vendor_debian·2022·CVSS 5.5
CVE-2022-50134 [MEDIUM] CVE-2022-50134: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: ...
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a memory chunk for uctxt->groups with hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups is not released, which will lead to a memory leak. We should release the uctxt->groups with hfi1_free_ctxt_rcv_groups() when init_user_ctxt() fails.
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.140-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
OSV
CVE-2022-50134: In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() alloca
osv·2025-06-18·CVSS 5.5
CVE-2022-50134 [MEDIUM] CVE-2022-50134: In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() alloca
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a memory chunk for uctxt->groups with hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups is not released, which will lead to a memory leak. We should release the uctxt->groups with hfi1_free_ctxt_rcv_groups() when init_user_ctxt() fails.
GHSA
GHSA-j4j9-j24x-79rm: In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
setup_base_ctxt() allo
ghsa_unreviewed·2025-06-18
CVE-2022-50134 [MEDIUM] CWE-401 GHSA-j4j9-j24x-79rm: In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
setup_base_ctxt() allo
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
setup_base_ctxt() allocates a memory chunk for uctxt->groups with
hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups
is not released, which will lead to a memory leak.
We should release the uctxt->groups with hfi1_free_ctxt_rcv_groups()
when init_user_ctxt() fails.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1750be1e9f18787cf717c24dbc5fa029fc372a22https://git.kernel.org/stable/c/2f90813f1c21c3d780585390af961bd17c8515aehttps://git.kernel.org/stable/c/90ef48a718f88935d4af53d7dadd1ceafe103ce6https://git.kernel.org/stable/c/a85c7dd1edadcdeca24e603a6618153a3bcc81cahttps://git.kernel.org/stable/c/a9055dfe437efae77e28e57205437c878a03ccb7https://git.kernel.org/stable/c/aa2a1df3a2c85f855af7d54466ac10bd48645d63https://git.kernel.org/stable/c/e25b828553aecb3185a8d8d0c4f9b4e133fb5db6https://git.kernel.org/stable/c/fc4de8009fd6c2ca51986c6757efa964040e7d02
2025-06-18
Published