CVE-2022-50702
published 2025-12-24CVE-2022-50702: In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() Inject…
PriorityP419low5.5
EPSS
0.18%
7.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
Inject fault while probing module, if device_register() fails in
vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is
not decreased to 0, the name allocated in dev_set_name() is leaked.
Fix this by calling put_device(), so that name can be freed in
callback function kobject_cleanup().
(vdpa_sim_net)
unreferenced object 0xffff88807eebc370 (size 16):
comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s)
hex dump (first 16 bytes):
76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk.
backtrace:
[] __kmalloc_node_track_caller+0x4e/0x150
[] kstrdup+0x33/0x60
[] kobject_set_name_vargs+0x41/0x110
[] dev_set_name+0xab/0xe0
[] device_add+0xe3/0x1a80
[] 0xffffffffa0270013
[] do_one_initcall+0x87/0x2e0
[] do_init_module+0x1ab/0x640
[] load_module+0x5d00/0x77f0
[] __do_sys_finit_module+0x110/0x1b0
[] do_syscall_64+0x35/0x80
[] entry_SYSCALL_64_after_hwframe+0x46/0xb0
(vdpa_sim_blk)
unreferenced object 0xffff8881070c1250 (size 16):
comm "modprobe", pid 6844, jiffies 4364069319 (age 17.572s)
hex dump (first 16 bytes):
76 64 70 61 73 69 6d 5f 62 6c 6b 00 6b 6b 6b a5 vdpasim_blk.kkk.
backtrace:
[] __kmalloc_node_track_caller+0x4e/0x150
[] kstrdup+0x33/0x60
[] kobject_set_name_vargs+0x41/0x110
[] dev_set_name+0xab/0xe0
[] device_add+0xe3/0x1a80
[] 0xffffffffa0220013
[] do_one_initcall+0x87/0x2e0
[] do_init_module+0x1ab/0x640
[] load_module+0x5d00/0x77f0
[] __do_sys_finit_module+0x110/0x1b0
[] do_syscall_64+0x35/0x80
[] entry_SYSCALL_64_after_hwframe+0x46/0xb0
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.7-1 (bookworm) | linux 6.1.7-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= a3c06ae158dd6fa8336157c31d9234689d068d02 < 586e6fd7d581f987f7d0d2592edf0b26397e783e | 586e6fd7d581f987f7d0d2592edf0b26397e783e |
| linux | linux | >= a3c06ae158dd6fa8336157c31d9234689d068d02 < 5be953e353fe421f2983e1fd37f07fba97edbffc | 5be953e353fe421f2983e1fd37f07fba97edbffc |
| linux | linux | >= a3c06ae158dd6fa8336157c31d9234689d068d02 < 337c24d817e28dd454ca22f1063dfad20822426e | 337c24d817e28dd454ca22f1063dfad20822426e |
| linux | linux | >= a3c06ae158dd6fa8336157c31d9234689d068d02 < aeca7ff254843d49a8739f07f7dab1341450111d | aeca7ff254843d49a8739f07f7dab1341450111d |
| linux | linux_kernel | >= 0 < 6.1.7-1 | 6.1.7-1 |
| linux | linux_kernel | >= 0 < 6.1.7-1 | 6.1.7-1 |
| linux | linux_kernel | >= 0 < 6.1.7-1 | 6.1.7-1 |
| linux | linux_kernel | >= 5.12.0 < 5.15.87 | 5.15.87 |
| linux | linux_kernel | >= 5.16.0 < 6.0.19 | 6.0.19 |
| linux | linux_kernel | >= 6.1.0 < 6.1.5 | 6.1.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p22c-78xj-4fp8: In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
ghsa_unreviewed·2025-12-24
CVE-2022-50702 GHSA-p22c-78xj-4fp8: In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
Inject fault while probing module, if device_register() fails in
vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is
not decreased to 0, the name allocated in dev_set_name() is leaked.
Fix this by calling put_device(), so that name can be freed in
callback function kobject_cleanup().
(vdpa_sim_net)
unreferenced object 0xffff88807eebc370 (size 16):
comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s)
hex dump (first 16 bytes):
76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk.
backtrace:
[] __kmalloc_node_track_caller+0x4e/0x150
[] kstrdup+0x33/0x60
[] kobject_set_name_vargs+0x41/0x110
[] dev_set_name
OSV
CVE-2022-50702: In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() In
osv·2025-12-24
CVE-2022-50702 CVE-2022-50702: In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() In
In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() Inject fault while probing module, if device_register() fails in vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is not decreased to 0, the name allocated in dev_set_name() is leaked. Fix this by calling put_device(), so that name can be freed in callback function kobject_cleanup(). (vdpa_sim_net) unreferenced object 0xffff88807eebc370 (size 16): comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s) hex dump (first 16 bytes): 76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk. backtrace: [] __kmalloc_node_track_caller+0x4e/0x150 [] kstrdup+0x33/0x60 [] kobject_set_name_vargs+0x41/0x110 [] dev_set_name+0x
OSV
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
osv·2025-12-24
CVE-2022-50702 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
Inject fault while probing module, if device_register() fails in
vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is
not decreased to 0, the name allocated in dev_set_name() is leaked.
Fix this by calling put_device(), so that name can be freed in
callback function kobject_cleanup().
(vdpa_sim_net)
unreferenced object 0xffff88807eebc370 (size 16):
comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s)
hex dump (first 16 bytes):
76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk.
backtrace:
[] __kmalloc_node_track_caller+0x4
Red Hat
kernel: Linux kernel: Memory leak in vdpa_sim leading to denial of service
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2022-50702 [LOW] CWE-772 kernel: Linux kernel: Memory leak in vdpa_sim leading to denial of service
kernel: Linux kernel: Memory leak in vdpa_sim leading to denial of service
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
Inject fault while probing module, if device_register() fails in
vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is
not decreased to 0, the name allocated in dev_set_name() is leaked.
Fix this by calling put_device(), so that name can be freed in
callback function kobject_cleanup().
(vdpa_sim_net)
unreferenced object 0xffff88807eebc370 (size 16):
comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s)
hex dump (first 16 bytes):
76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk.
backtrace:
[] __kmalloc_node_track_caller+0x4e/0x150
Debian
CVE-2022-50702: linux - In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: f...
vendor_debian·2022
CVE-2022-50702 CVE-2022-50702: linux - In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: f...
In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() Inject fault while probing module, if device_register() fails in vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is not decreased to 0, the name allocated in dev_set_name() is leaked. Fix this by calling put_device(), so that name can be freed in callback function kobject_cleanup(). (vdpa_sim_net) unreferenced object 0xffff88807eebc370 (size 16): comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s) hex dump (first 16 bytes): 76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk. backtrace: [] __kmalloc_node_track_caller+0x4e/0x150 [] kstrdup+0x33/0x60 [] kobject_set_name_vargs+0x41/0x110 [] dev_set_name+0x
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50702 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50702 CVE-2022-50702 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50702 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
Inject fault while probing module, if device_register() fails in
vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is
not decreased to 0, the name allocated in dev_set_name() is leaked.
Fix this by calling put_device(), so that name can be freed in
callback function kobject_cleanup().
(vdpa_sim_net)
unreferenced object 0xffff88807eebc370 (size 16):
comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s)
hex dump (first 16 bytes):
76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk.
backtrace:
[ ] __kmalloc_node_track_caller+0x4e/0x150
Bugzilla
CVE-2022-50702 kernel: Linux kernel: Memory leak in vdpa_sim leading to denial of service
bugzilla·2025-12-24
CVE-2022-50702 [LOW] CVE-2022-50702 kernel: Linux kernel: Memory leak in vdpa_sim leading to denial of service
CVE-2022-50702 kernel: Linux kernel: Memory leak in vdpa_sim leading to denial of service
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
Inject fault while probing module, if device_register() fails in
vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is
not decreased to 0, the name allocated in dev_set_name() is leaked.
Fix this by calling put_device(), so that name can be freed in
callback function kobject_cleanup().
(vdpa_sim_net)
unreferenced object 0xffff88807eebc370 (size 16):
comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s)
hex dump (first 16 bytes):
76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk.
backtrace:
[] __kmalloc_node_track_
2025-12-24
Published