cbcvebase.
CVE-2022-50376
published 2025-09-18

CVE-2022-50376: In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() When insert and remove the…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.3th percentile
In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() When insert and remove the orangefs module, there are memory leaked as below: unreferenced object 0xffff88816b0cc000 (size 2048): comm "insmod", pid 783, jiffies 4294813439 (age 65.512s) hex dump (first 32 bytes): 6e 6f 6e 65 0a 00 00 00 00 00 00 00 00 00 00 00 none............ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] kmalloc_trace+0x27/0xa0 [] orangefs_debugfs_init.cold+0xaf/0x17f [] 0xffffffffa02780f9 [] do_one_initcall+0x87/0x2a0 [] do_init_module+0xdf/0x320 [] load_module+0x2f98/0x3330 [] __do_sys_finit_module+0x113/0x1b0 [] do_syscall_64+0x35/0x80 [] entry_SYSCALL_64_after_hwframe+0x46/0xb0 Use the golbal variable as the buffer rather than dynamic allocate to slove the problem.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.4-1 (bookworm)linux 6.1.4-1 (bookworm)
linuxlinux——
linuxlinux>= f7ab093f74bf638ed98fd1115f3efa17e308bb7f < bdc2d33fa2324b1f5ab5b701cda45ee0b2384409bdc2d33fa2324b1f5ab5b701cda45ee0b2384409
linuxlinux>= f7ab093f74bf638ed98fd1115f3efa17e308bb7f < a076490b0211990ec6764328c22cb744dd782bd9a076490b0211990ec6764328c22cb744dd782bd9
linuxlinux>= f7ab093f74bf638ed98fd1115f3efa17e308bb7f < c8853267289c55b1acbe4dc3641374887584834dc8853267289c55b1acbe4dc3641374887584834d
linuxlinux>= f7ab093f74bf638ed98fd1115f3efa17e308bb7f < 786e5296f9e3b045d5ff9098514ce7b8ba1d890d786e5296f9e3b045d5ff9098514ce7b8ba1d890d
linuxlinux>= f7ab093f74bf638ed98fd1115f3efa17e308bb7f < 0cd303aad220fafa595e0ed593e99aa51b90412b0cd303aad220fafa595e0ed593e99aa51b90412b
linuxlinux>= f7ab093f74bf638ed98fd1115f3efa17e308bb7f < 31720a2b109b3080eb77e97b8f6f50a27b4ae59931720a2b109b3080eb77e97b8f6f50a27b4ae599
linuxlinux_kernel>= 0 < 5.10.178-15.10.178-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 4.6 < 5.4.2295.4.229
linuxlinux_kernel>= 5.11 < 5.15.865.15.86
linuxlinux_kernel>= 5.16 < 6.0.166.0.16
linuxlinux_kernel>= 5.5 < 5.10.1635.10.163
linuxlinux_kernel>= 6.1 < 6.1.26.1.2

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.