CVE-2022-50462
published 2025-10-01CVE-2022-50462: In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fix possible memory leak while module exiting Afer commit 1fa5ae857bb1…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
MIPS: vpe-mt: fix possible memory leak while module exiting
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
it need be freed when module exiting, call put_device() to give up
reference, so that it can be freed in kobject_cleanup() when the
refcount hit to 0. The vpe_device is static, so remove kfree() from
vpe_device_release().
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 170e9913c2ed5cfc37c0adf0fdbd368d2d8d8168 | 170e9913c2ed5cfc37c0adf0fdbd368d2d8d8168 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 9d180e0bb21c57bd6cca2adeb672d3b522e910b5 | 9d180e0bb21c57bd6cca2adeb672d3b522e910b5 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 851ae5640875f06494e40002cd503b11a634c6fb | 851ae5640875f06494e40002cd503b11a634c6fb |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < b3325a443525e3b89151879b834519b21c5e3011 | b3325a443525e3b89151879b834519b21c5e3011 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 48d42f4464d713fbdd79f334fdcd6e5be534cc67 | 48d42f4464d713fbdd79f334fdcd6e5be534cc67 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < e820a8192ff68570100347855b567512aec43819 | e820a8192ff68570100347855b567512aec43819 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < b191dde84e40624d5577f64db0ec922c5c0ec57c | b191dde84e40624d5577f64db0ec922c5c0ec57c |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < ab3d47c1fd0202821abd473ca87580faafd47847 | ab3d47c1fd0202821abd473ca87580faafd47847 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 5822e8cc84ee37338ab0bdc3124f6eec04dc232d | 5822e8cc84ee37338ab0bdc3124f6eec04dc232d |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 2.6.30 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1 < 6.1.2 | 6.1.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: MIPS: vpe-mt: fix possible memory leak while module exiting
vendor_redhat·2025-10-01·CVSS 5.5
CVE-2022-50462 [MEDIUM] kernel: MIPS: vpe-mt: fix possible memory leak while module exiting
kernel: MIPS: vpe-mt: fix possible memory leak while module exiting
In the Linux kernel, the following vulnerability has been resolved:
MIPS: vpe-mt: fix possible memory leak while module exiting
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
it need be freed when module exiting, call put_device() to give up
reference, so that it can be freed in kobject_cleanup() when the
refcount hit to 0. The vpe_device is static, so remove kfree() from
vpe_device_release().
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affecte
Debian
CVE-2022-50462: linux - In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-m...
vendor_debian·2022·CVSS 5.5
CVE-2022-50462 [MEDIUM] CVE-2022-50462: linux - In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-m...
In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fix possible memory leak while module exiting Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, it need be freed when module exiting, call put_device() to give up reference, so that it can be freed in kobject_cleanup() when the refcount hit to 0. The vpe_device is static, so remove kfree() from vpe_device_release().
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
GHSA
GHSA-72vp-mgcv-889w: In the Linux kernel, the following vulnerability has been resolved:
MIPS: vpe-mt: fix possible memory leak while module exiting
Afer commit 1fa5ae85
ghsa_unreviewed·2025-10-01
CVE-2022-50462 [MEDIUM] CWE-401 GHSA-72vp-mgcv-889w: In the Linux kernel, the following vulnerability has been resolved:
MIPS: vpe-mt: fix possible memory leak while module exiting
Afer commit 1fa5ae85
In the Linux kernel, the following vulnerability has been resolved:
MIPS: vpe-mt: fix possible memory leak while module exiting
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
it need be freed when module exiting, call put_device() to give up
reference, so that it can be freed in kobject_cleanup() when the
refcount hit to 0. The vpe_device is static, so remove kfree() from
vpe_device_release().
OSV
CVE-2022-50462: In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fix possible memory leak while module exiting Afer commit 1fa5ae857b
osv·2025-10-01·CVSS 5.5
CVE-2022-50462 [MEDIUM] CVE-2022-50462: In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fix possible memory leak while module exiting Afer commit 1fa5ae857b
In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fix possible memory leak while module exiting Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, it need be freed when module exiting, call put_device() to give up reference, so that it can be freed in kobject_cleanup() when the refcount hit to 0. The vpe_device is static, so remove kfree() from vpe_device_release().
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/170e9913c2ed5cfc37c0adf0fdbd368d2d8d8168https://git.kernel.org/stable/c/48d42f4464d713fbdd79f334fdcd6e5be534cc67https://git.kernel.org/stable/c/5822e8cc84ee37338ab0bdc3124f6eec04dc232dhttps://git.kernel.org/stable/c/851ae5640875f06494e40002cd503b11a634c6fbhttps://git.kernel.org/stable/c/9d180e0bb21c57bd6cca2adeb672d3b522e910b5https://git.kernel.org/stable/c/ab3d47c1fd0202821abd473ca87580faafd47847https://git.kernel.org/stable/c/b191dde84e40624d5577f64db0ec922c5c0ec57chttps://git.kernel.org/stable/c/b3325a443525e3b89151879b834519b21c5e3011https://git.kernel.org/stable/c/e820a8192ff68570100347855b567512aec43819
2025-10-01
Published