CVE-2022-50707 — Missing Release of Memory after Effective Lifetime in Linux
7 documents6 sources
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
'vc_ctrl_req' is alloced in virtio_crypto_alg_skcipher_close_session(),
and should be freed in the invalid ctrl_status->status error handling
case. Otherwise there is a memory leak.
Affected Packages4 packages
▶CVEListV5linux/linux4ee475e76b5ea8061970a7c867ffa5eedeb39580 — 79026a2d0a1b080257773d22a493f9bcab8c65be+4
🔴Vulnerability Details
3OSV▶
CVE-2022-50707: In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() 'vc_c↗2025-12-24
GHSA▶
GHSA-fv92-j7fm-4rhq: In the Linux kernel, the following vulnerability has been resolved:
virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
'vc↗2025-12-24