CVE-2022-50639
published 2025-12-09CVE-2022-50639: In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then…
PriorityP418low5.5
EPSS
0.19%
9.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
io-wq: Fix memory leak in worker creation
If the CPU mask allocation for a node fails, then the memory allocated for
the 'io_wqe' struct of the current node doesn't get freed on the error
handling path, since it has not yet been added to the 'wqes' array.
This was spotted when fuzzing v6.1-rc1 with Syzkaller:
BUG: memory leak
unreferenced object 0xffff8880093d5000 (size 1024):
comm "syz-executor.2", pid 7701, jiffies 4295048595 (age 13.900s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[] __kmem_cache_alloc_node+0x18e/0x720
[] kmalloc_node_trace+0x2a/0x130
[] io_wq_create+0x7b9/0xdc0
[] io_uring_alloc_task_context+0x31e/0x59d
[] __io_uring_add_tctx_node.cold+0x19/0x1ba
[] io_uring_setup.cold+0x1b80/0x1dce
[] __x64_sys_io_uring_setup+0x5d/0x80
[] do_syscall_64+0x5d/0x90
[] entry_SYSCALL_64_after_hwframe+0x63/0xcd
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.5-1 (bookworm) | linux 6.0.5-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 0e03496d1967abf1ebb151a24318c07d07f41f7f < b6e2c54be37d5eb4f6666e6aa59cd0581c7ffc3c | b6e2c54be37d5eb4f6666e6aa59cd0581c7ffc3c |
| linux | linux | >= 0e03496d1967abf1ebb151a24318c07d07f41f7f < ed981911a7c90a604f4a2bee908ab07e3b786aca | ed981911a7c90a604f4a2bee908ab07e3b786aca |
| linux | linux | >= 0e03496d1967abf1ebb151a24318c07d07f41f7f < 996d3efeb091c503afd3ee6b5e20eabf446fd955 | 996d3efeb091c503afd3ee6b5e20eabf446fd955 |
| linux | linux_kernel | >= 0 < 6.0.5-1 | 6.0.5-1 |
| linux | linux_kernel | >= 0 < 6.0.5-1 | 6.0.5-1 |
| linux | linux_kernel | >= 0 < 6.0.5-1 | 6.0.5-1 |
| linux | linux_kernel | >= 5.14.0 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16.0 < 6.0.4 | 6.0.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50639: In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fa
osv·2025-12-09
CVE-2022-50639 CVE-2022-50639: In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fa
In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'io_wqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been added to the 'wqes' array. This was spotted when fuzzing v6.1-rc1 with Syzkaller: BUG: memory leak unreferenced object 0xffff8880093d5000 (size 1024): comm "syz-executor.2", pid 7701, jiffies 4295048595 (age 13.900s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] __kmem_cache_alloc_node+0x18e/0x720 [] kmalloc_node_trace+0x2a/0x130 [] io_wq_create+0x7b9/0xdc0 [] io_uring_alloc_
OSV
io-wq: Fix memory leak in worker creation
osv·2025-12-09
CVE-2022-50639 io-wq: Fix memory leak in worker creation
io-wq: Fix memory leak in worker creation
In the Linux kernel, the following vulnerability has been resolved:
io-wq: Fix memory leak in worker creation
If the CPU mask allocation for a node fails, then the memory allocated for
the 'io_wqe' struct of the current node doesn't get freed on the error
handling path, since it has not yet been added to the 'wqes' array.
This was spotted when fuzzing v6.1-rc1 with Syzkaller:
BUG: memory leak
unreferenced object 0xffff8880093d5000 (size 1024):
comm "syz-executor.2", pid 7701, jiffies 4295048595 (age 13.900s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[] __kmem_cache_alloc_node+0x18e/0x720
[] kmalloc_node_trace+0x2a/0x130
GHSA
GHSA-556c-4mvg-6pqr: In the Linux kernel, the following vulnerability has been resolved:
io-wq: Fix memory leak in worker creation
If the CPU mask allocation for a node
ghsa_unreviewed·2025-12-09
CVE-2022-50639 GHSA-556c-4mvg-6pqr: In the Linux kernel, the following vulnerability has been resolved:
io-wq: Fix memory leak in worker creation
If the CPU mask allocation for a node
In the Linux kernel, the following vulnerability has been resolved:
io-wq: Fix memory leak in worker creation
If the CPU mask allocation for a node fails, then the memory allocated for
the 'io_wqe' struct of the current node doesn't get freed on the error
handling path, since it has not yet been added to the 'wqes' array.
This was spotted when fuzzing v6.1-rc1 with Syzkaller:
BUG: memory leak
unreferenced object 0xffff8880093d5000 (size 1024):
comm "syz-executor.2", pid 7701, jiffies 4295048595 (age 13.900s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[] __kmem_cache_alloc_node+0x18e/0x720
[] kmalloc_node_trace+0x2a/0x130
[] io_wq_create+0x7b9/0xdc0
[] io_uring_all
Red Hat
kernel: io-wq: Fix memory leak in worker creation
vendor_redhat·2025-12-09·CVSS 5.5
CVE-2022-50639 [LOW] CWE-772 kernel: io-wq: Fix memory leak in worker creation
kernel: io-wq: Fix memory leak in worker creation
In the Linux kernel, the following vulnerability has been resolved:
io-wq: Fix memory leak in worker creation
If the CPU mask allocation for a node fails, then the memory allocated for
the 'io_wqe' struct of the current node doesn't get freed on the error
handling path, since it has not yet been added to the 'wqes' array.
This was spotted when fuzzing v6.1-rc1 with Syzkaller:
BUG: memory leak
unreferenced object 0xffff8880093d5000 (size 1024):
comm "syz-executor.2", pid 7701, jiffies 4295048595 (age 13.900s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[] __kmem_cache_alloc_node+0x18e/0x720
[] kmalloc_node_trace+0x2a/0
Debian
CVE-2022-50639: linux - In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix ...
vendor_debian·2022
CVE-2022-50639 CVE-2022-50639: linux - In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix ...
In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'io_wqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been added to the 'wqes' array. This was spotted when fuzzing v6.1-rc1 with Syzkaller: BUG: memory leak unreferenced object 0xffff8880093d5000 (size 1024): comm "syz-executor.2", pid 7701, jiffies 4295048595 (age 13.900s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] __kmem_cache_alloc_node+0x18e/0x720 [] kmalloc_node_trace+0x2a/0x130 [] io_wq_create+0x7b9/0xdc0 [] io_uring_alloc_
No detection rules found.
No public exploits indexed.
2025-12-09
Published